last executing test programs: 5.934304361s ago: executing program 1 (id=1464): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x40004) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/006/001\x00', 0xa901, 0x0) ioctl$auto(0xffffffffffffffff, 0x99, 0xffffffffffffffff) io_uring_setup$auto(0x6, 0x0) bpf$auto(0x5, &(0x7f0000000040)=@bpf_attr_7={@prog_id=0x12, 0x9, 0x6}, 0xa) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptyq4\x00', 0x101000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) io_uring_setup$auto(0x1, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xc048aeca, 0x0) r2 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) ioctl$auto_PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x0, 0xe8, 0x0, 0x2, 0xe4, 0x2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x200040009, 0xdf, 0x7b4, r3, 0x6) open(&(0x7f0000000180)='./file0/file0\x00', 0x7c1942, 0x54) 5.11446713s ago: executing program 1 (id=1469): close_range$auto(0x0, 0xffffeffe, 0x2) r0 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = socket(0xa, 0x1, 0x84) getsockopt$auto(r2, 0x84, 0x8, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/bus/usb/028/001\x00', 0xa801, 0x0) ioctl$auto_USBDEVFS_SUBMITURB32(r3, 0x802c550a, &(0x7f0000000300)=ANY=[@ANYBLOB="020000060000e6ff040000000100400008"]) fsconfig$auto_HIDEPID_NOT_PTRACEABLE(r1, 0x7, &(0x7f0000000000)='\x00', &(0x7f0000000080)="77fd236dbce6ca3b42824a1284c04747fa7355a909cd83cf691e04d08d94b5a2e0363e321e21d5a1720f60d842c0f229fdc2d271814476b84300f4a9d7331bf68fb6593fc4bff65d106cb464a34f3506a845da96ac197d1821dc3f952be6a32cb19238e5d6cb5d97bc8c85649fe1c26abfa91f40cc56bdf685cad56286b4e3a08b0ac8995885d30f7323d6994b007ceb2a181160438f5c528a66b3a2fb52eeb032e5ae90ae18b6dffad24a53c790680bfa494dceb764ba8c9c9ef8d9db4a8432c77c491ff8b3", 0x4) sendmsg$auto_TCP_METRICS_CMD_GET(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x14, r0, 0x89c1beb01534ff9b, 0x70bd29, 0x25dfd3f9}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) 4.988798532s ago: executing program 2 (id=1471): mmap$auto(0x0, 0xf6, 0xdf, 0xeb1, 0x401, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nbd3\x00', 0x0, 0x0) socket(0xa, 0x801, 0x84) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace\x00', 0x2, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) close_range$auto(0x2, 0x8000, 0x0) r1 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000001240), 0x40, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(r1, 0x3b8e, r0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) ioctl$auto(r2, 0x40104d05, r2) preadv$auto(0xffffffffffffffff, 0x0, 0x9, 0xff, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bpf$auto_BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=@bpf_attr_4={0x142, 0xffffffffffffffff, 0x5}, 0x3) syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) mmap$auto(0x0, 0x28009, 0x4000000000df, 0xeb2, r4, 0x8000) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=r5, @ANYBLOB="010029bd7000fbdbdf2512e233da08000300", @ANYRES32=r4], 0x24}, 0x1, 0x1400, 0x0, 0x80}, 0x20000084) sendmsg$auto_NL80211_CMD_DEL_STATION(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0x26, 0x1a, "d36c6860627926579cc5a05a11ebbecd7d36b44d3a6525bd7a542d7bf0c720274ce9"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000040) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, r6, 0x8000) ioctl$auto_SNDCTL_SEQ_NRSYNTHS(r3, 0x8004510a, &(0x7f0000000200)="b991fb64739d69bfe43f072422b83d909913eb347c0ffc2e7359c0400b45357bef8080e2b2ce8c4aeb08122a45e858a2e7c116e791e10545a7") openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) ioctl$auto_BLKRRPART(r6, 0x125f, 0x0) madvise$auto(0x0, 0x400053, 0x9) 4.769643789s ago: executing program 1 (id=1472): close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) syz_genetlink_get_family_id$auto_tcp_metrics(0x0, 0xffffffffffffffff) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc084810}, 0x8850) openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, 0x0, 0xf81e09f4e322f53a, 0x0) madvise$auto(0x4, 0x5, 0x5) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x2) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x20a00, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto(r0, 0x0, 0x1ff) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_buffer_subbuf_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/buffer_subbuf_size_kb\x00', 0x101502, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x487, 0x0, 0x14) bind$auto(0x4, 0xfffffffffffffffe, 0x1fffe) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x29e2c2, 0x0) 4.619414807s ago: executing program 2 (id=1473): mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) sendfile$auto(r0, r1, 0x0, 0x1000202) socket(0x11, 0x3, 0x300) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_STATUS64(r2, 0x80605414, &(0x7f00000001c0)={0x6, 0x9, 0x200, 0xba44, 0x2, 0x1, "e00026e8fdffdbcd2c02d3c293faa80c2f5336d79fc5b8202cb37f6b6d22c4243235c8eb58e78afdbae704000000000000000000ff7f0000000000000a6e9d13"}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0x20000000000e31, 0x40000000000a5, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) quotactl_fd$auto(0xffffffffffffffff, 0x200, 0x0, 0x0) ioctl$auto_NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram2/partscan\x00', 0x80200, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x101200, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) connect$auto(0x3, &(0x7f0000000080)=@sco={0x1f, @none}, 0x50) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000017c0)='/sys/kernel/debug/lru_gen\x00', 0x1, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSTI2(r4, 0x545c, 0x0) io_destroy$auto(0x70f) ioctl$auto_TIOCVHANGUP2(r4, 0x5437, 0x0) io_uring_setup$auto(0xa9, &(0x7f0000000080)={0x80000003, 0xfff, 0x2, 0x6, 0x400085, 0xa, r3, [0x8, 0x4, 0xd], {0xd74c, 0x10000, 0x6, 0xb, 0x2, 0x7, 0x4, 0x406, 0x17c}, {0xff, 0x1, 0x10001, 0x7, 0x5, 0x44, 0x8, 0x400005, 0xa88}}) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/event1\x00', 0x40000, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) 4.573002693s ago: executing program 1 (id=1474): fsconfig$auto_SHMEM_HUGE_DENY(0xffffffffffffffff, 0x5, &(0x7f0000000140)='\\!:\x00', 0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80080, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) unshare$auto(0x7) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x5, 0x4, 0x80000001) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r2) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv6/conf/default/ignore_routes_with_linkdown\x00', 0x42a81, 0x0) pwrite64$auto(r4, 0x0, 0x0, 0x5) getcpu$auto(0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffd) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x805, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vivid.0/video4linux/video40/power/runtime_suspended_time\x00', 0xc0a00, 0x0) pread64$auto(r1, 0x0, 0x9, 0x4000c) 3.327693282s ago: executing program 1 (id=1478): futimesat$auto(0xffffffffffffffff, 0x0, &(0x7f0000003580)={0x9, 0x800000000008001}) r0 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, 0x0, 0x1940, 0x0) ioctl$auto_IOCTL_GET_NUM_DEVICES(r0, 0x40046104, &(0x7f0000000040)=0x74c7) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/nbd10\x00', 0x80, 0x0) ioctl$auto_FUSE_DEV_IOC_BACKING_OPEN(0xffffffffffffffff, 0x4010e501, &(0x7f0000000000)={r0, 0x2}) flock$auto(r1, 0x400) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000180)=""/178, 0xb2) madvise$auto(0x110c230000, 0x1, 0x9) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r4 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) write$auto_proc_mem_operations_base(r4, 0x0, 0x0) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) mbind$auto(0x8, 0x80, 0xffffffffffffffc7, 0x0, 0x0, 0x4) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000140), 0xffffffffffffffff) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda1\x00', 0x4040, 0x0) fadvise64$auto(r5, 0x7fffffffffffffff, 0x400000040000005, 0x4) mmap$auto(0x0, 0xc685, 0x3e, 0x1200000010, r2, 0x4) mmap$auto(0x0, 0x202000a, 0x3, 0x16, 0xfffffffffffffffb, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000000000008000) io_setup$auto(0x7ffe, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3.066822644s ago: executing program 2 (id=1480): socket(0xa, 0x801, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x1e, 0x0, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6d) openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/tracing/trace_marker\x00', 0x43, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000140)=""/41, 0x29) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) r2 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$auto_UBI_IOCATT(r2, 0x40186f40, &(0x7f0000000080)={0xffffffff, 0x0, 0x3f, 0x808, 0x1, 0x1}) mmap$auto(0x7, 0x2020009, 0x2, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x28) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/platform/vhci_hcd.14/usb38/38-0:1.0/usb38-port4/early_stop\x00', 0x555ac0, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000080)="2d296699eb5df9d24db978ee2ae789f693d6325d33d31c0a", 0x18) prctl$auto_PR_GET_SECCOMP(0x15, 0xe, 0x9, 0x6, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r4 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) r5 = openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x4400, 0x0) read$auto_rfcomm_sock_debugfs_fops_(r5, &(0x7f0000000080)=""/17, 0x11) ioctl$auto_PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x2, 0x7, 0xbff, 0x2c, 0x2c, 0x3, 0x2}) r6 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000180), 0xffffffffffffffff) r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv6/conf/nlmon0/addr_gen_mode\x00', 0xa02, 0x0) pwritev2$auto(r7, &(0x7f0000001040)={&(0x7f0000000040), 0x1}, 0x8000000000000001, 0x100020001, 0x7, 0x4) sendmsg$auto_OVS_VPORT_CMD_DEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x20, r6, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@OVS_VPORT_ATTR_UPCALL_STATS={0x4}, @OVS_VPORT_ATTR_PORT_NO={0x8, 0x1, 0xfff}]}, 0x20}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) 2.865938863s ago: executing program 3 (id=1483): socket(0x2c, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, 0x0, 0x2282, 0x0) getsockopt$auto_SO_TIMESTAMPING_OLD(0xffffffffffffffff, 0x9, 0x25, &(0x7f0000000080)='/dev/mtd0\x00', &(0x7f0000000100)=0x3ff) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/nbd3/queue/discard_granularity\x00', 0x48000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000200)=""/253, 0xfd) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) socket(0x1d, 0x5, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x89\xe8^\x98#\x86\x92\x86w\xa1\x05\x9b\xad}yX\xc5\xc0\x1c\xd1\xd9\x9e\x91\b\xfc=\x18\xf9E\b\xa3Rgu\xf5L\x1d\xf8\ny', 0x401) ioctl$auto_VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000884) lstat$auto(0x0, &(0x7f0000000180)={0xf, 0xfffffffffffffffe, 0x400000100000001, 0x1000, 0x0, 0x0, 0x0, 0x220fa98, 0xc, 0x6, 0x8000000008, 0x100000007fffffff, 0xffffffffffffffff, 0x0, 0x7, 0x4, 0xb}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) io_uring_register$auto_IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0xbad3) setreuid$auto(0x3, 0x7) mlock$auto(0xfbe8, 0x1000000000000004) unshare$auto(0x8100000) 2.168391143s ago: executing program 3 (id=1485): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.854928033s ago: executing program 3 (id=1488): syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000009500)=ANY=[], 0x5254}, 0x1, 0x0, 0x0, 0x40c8}, 0x4048000) 1.546164921s ago: executing program 3 (id=1489): mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) sendfile$auto(r0, r1, 0x0, 0x1000202) socket(0x11, 0x3, 0x300) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_STATUS64(r2, 0x80605414, &(0x7f00000001c0)={0x6, 0x9, 0x200, 0xba44, 0x2, 0x1, "e00026e8fdffdbcd2c02d3c293faa80c2f5336d79fc5b8202cb37f6b6d22c4243235c8eb58e78afdbae704000000000000000000ff7f0000000000000a6e9d13"}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0x20000000000e31, 0x40000000000a5, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) quotactl_fd$auto(0xffffffffffffffff, 0x200, 0x0, 0x0) ioctl$auto_NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram2/partscan\x00', 0x80200, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x101200, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) connect$auto(0x3, &(0x7f0000000080)=@sco={0x1f, @none}, 0x50) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000017c0)='/sys/kernel/debug/lru_gen\x00', 0x1, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSTI2(r4, 0x545c, 0x0) io_destroy$auto(0x70f) ioctl$auto_TIOCVHANGUP2(r4, 0x5437, 0x0) io_uring_setup$auto(0xa9, &(0x7f0000000080)={0x80000003, 0xfff, 0x2, 0x6, 0x400085, 0xa, r3, [0x8, 0x4, 0xd], {0xd74c, 0x10000, 0x6, 0xb, 0x2, 0x7, 0x4, 0x406, 0x17c}, {0xff, 0x1, 0x10001, 0x7, 0x5, 0x44, 0x8, 0x400005, 0xa88}}) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/event1\x00', 0x40000, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) 1.545335266s ago: executing program 0 (id=1497): syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000009500)=ANY=[], 0x5254}, 0x1, 0x0, 0x0, 0x40c8}, 0x4048000) 1.544714672s ago: executing program 2 (id=1490): madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x80064, 0x9) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0xffffffffffffffff, 0xeb1, 0xfffffffffffffff7, 0x6a0000000000000) close_range$auto(0xffffffffffffffff, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x26000, 0x0) r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket(0x10, 0x2, 0xc) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r3, 0x10, 0x70bd2c, 0x25dfdbfb, {0xa, 0x0, 0xa00}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x6}]}, 0x1c}}, 0x10004010) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x14, r1, 0x400, 0x70bd28, 0x25dfdbfb, {0xa, 0x0, 0xa00}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) r4 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) sendmsg$auto_ETHTOOL_MSG_STATS_GET(0xffffffffffffffff, 0x0, 0x20000085) write$auto(r4, 0x0, 0x4) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) linkat$auto(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x3ff) 1.38161694s ago: executing program 1 (id=1491): r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cec26\x00', 0xc0000, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000180)={'\x00\x00\b\x00', 0x0, 0x5, 0x2, 0x9b7, 0x9, "fafffffc3924222ce18c1000", '\x00', "0001410c", '\x00', ["f5404de9641f0000000060c1", "6c6529a30418fffffffff300", "ef5ac4927aed9c5c00000080", ' \x00\x00\x00\x00\x00\t\x00']}) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, 0x0) r2 = socket(0xa, 0x5, 0x84) r3 = getsockopt$auto(r2, 0x0, 0x53, 0x0, 0x0) mmap$auto(0xea8c, 0x8, 0x8, 0xfffffffffffffffb, r1, 0x3) shmctl$auto_SHM_LOCK(0x5, 0xb, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) socket(0x25, 0x2, 0x0) socket(0x1d, 0x4, 0x84) mmap$auto(0x0, 0x400005, 0x9, 0xff, r3, 0x8000) r4 = getpgrp(0x0) process_vm_readv$auto(r4, 0x0, 0x800000005, &(0x7f00000000c0)={0x0, 0x1fffffffe}, 0x2, 0x1) setsockopt$auto(r1, 0x140400, 0x40000005, 0x0, 0x8000008) unshare$auto(0x40000080) mmap$auto(0x2, 0x2020009, 0x3, 0x400000000eb1, 0xfffffffffffffffa, 0x8000) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40602, 0x0) getsockopt$auto_SO_TXTIME(r2, 0x9, 0x3d, 0x0, 0x0) prctl$auto(0x23, 0x6, 0x0, 0x7e, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r5 = gettid() mmap$auto(0x0, 0x7, 0x6c, 0xd6, r3, 0x6) rt_sigqueueinfo$auto(r5, 0x3ff, &(0x7f0000000000)={@siginfo_0_0={0x7, 0x7, 0xfffffffa, @_sigchld={r5, 0x0, 0xc525, 0x4, 0x6}}}) socketpair$auto(0x12008, 0x7ff, 0x4, 0x0) mmap$auto(0x0, 0x2020009, 0x1000000000006, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, &(0x7f0000000000), 0x82c00, 0x0) 1.379033826s ago: executing program 0 (id=1492): fsconfig$auto_SHMEM_HUGE_DENY(0xffffffffffffffff, 0x5, &(0x7f0000000140)='\\!:\x00', 0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) read$auto(0xffffffffffffffff, 0x0, 0x20) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x4, 0x14) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r1) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x42a81, 0x0) getcpu$auto(0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffd) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x805, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vivid.0/video4linux/video40/power/runtime_suspended_time\x00', 0xc0a00, 0x0) 1.318503389s ago: executing program 2 (id=1493): socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb4, 0x401, 0x52bf25d3) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket(0x10, 0x2, 0x0) socket(0x15, 0x5, 0x0) socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x2, 0x80002, 0x73) ioctl$auto(0x4000000000000c8, 0x400454d0, r1) ioctl$auto_SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, &(0x7f0000000080)=0x5) unshare$auto(0x40000080) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/5t\x00', 0xa00, 0x0) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/usb/usbmon/36u\x00', 0x260c0, 0x0) setresuid$auto(0x0, 0x0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snd/midiC2D0\x00', 0x0, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9d\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00'/163, 0x100000a3d9) sendmsg$auto_IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x4000) mmap$auto(0x0, 0x7f, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000100)={0x2, 0x80, 0xffff, 0x5, &(0x7f0000000240), 0xc694, 0x3, 0x80005, @stream_id=0x7, 0x2004b, 0xc, 0x0}) close_range$auto(0x2, 0x8, 0x0) socket(0x11, 0x2, 0x0) capset$auto(0x0, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000040)='/dev/usbmon0\x00', 0x0, 0x0) bpf$auto_BPF_LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000280)=@link_detach={r0}, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/snd_hda_intel/parameters/bdl_pos_adj\x00', 0x80102, 0x0) select$auto(0xff800000, &(0x7f0000000040)={[0x49, 0x1, 0x8000000000000001, 0x4, 0x0, 0xffffffffffffffa4, 0x100000001, 0xffffffff, 0x4, 0x688, 0x0, 0x10, 0xbef0, 0x83, 0x1, 0x8]}, 0x0, 0x0, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) 1.046069866s ago: executing program 0 (id=1494): fsconfig$auto_SHMEM_HUGE_DENY(0xffffffffffffffff, 0x5, &(0x7f0000000140)='\\!:\x00', 0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80080, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) unshare$auto(0x7) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x4, 0x14) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r2) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv6/conf/default/ignore_routes_with_linkdown\x00', 0x42a81, 0x0) pwrite64$auto(r4, 0x0, 0xeffdffffffffffff, 0x5) getcpu$auto(0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffd) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x805, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vivid.0/video4linux/video40/power/runtime_suspended_time\x00', 0xc0a00, 0x0) pread64$auto(r1, 0x0, 0x9, 0x4000c) 623.540031ms ago: executing program 0 (id=1495): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) futex$auto(&(0x7f0000000080)=0x1, 0xb, 0x1, 0x0, 0x0, 0xfffffffa) syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$auto(0x0, 0x2020009, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x1e, 0x4, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ncsi(0x0, r2) sendmsg$auto_NCSI_CMD_SET_CHANNEL_MASK(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r3, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NCSI_ATTR_CHANNEL_MASK={0x8, 0x8, 0x4}, @NCSI_ATTR_MULTI_FLAG={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000041}, 0x2004c000) sendmsg$auto_NCSI_CMD_SET_CHANNEL_MASK(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f00000000c0)={0xa4, r3, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@NCSI_ATTR_CHANNEL_MASK={0x8, 0x8, 0x40}, @NCSI_ATTR_PACKAGE_LIST={0x80, 0x2, 0x0, 0x1, [@generic="649ae849c75c00837f1cdac8344f30110963b524473624db24943a9ab39271d1eedece5c9188a8a146cc9a76a479713453ee1740904de0be50c75834ccdb1e4e50c0d0d6aeaa75d9a532019e126c7837081106ccbfcef78d0ff0acdb2f2ae056600d16b75c1e8aad6dfd31fd9bb6430be002d785cfcd2f380ae4bd6f"]}, @NCSI_ATTR_MULTI_FLAG={0x4}, @NCSI_ATTR_PACKAGE_LIST={0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) (async) sendmsg$auto_NCSI_CMD_SET_CHANNEL_MASK(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f00000000c0)={0xa4, r3, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@NCSI_ATTR_CHANNEL_MASK={0x8, 0x8, 0x40}, @NCSI_ATTR_PACKAGE_LIST={0x80, 0x2, 0x0, 0x1, [@generic="649ae849c75c00837f1cdac8344f30110963b524473624db24943a9ab39271d1eedece5c9188a8a146cc9a76a479713453ee1740904de0be50c75834ccdb1e4e50c0d0d6aeaa75d9a532019e126c7837081106ccbfcef78d0ff0acdb2f2ae056600d16b75c1e8aad6dfd31fd9bb6430be002d785cfcd2f380ae4bd6f"]}, @NCSI_ATTR_MULTI_FLAG={0x4}, @NCSI_ATTR_PACKAGE_LIST={0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) statmount$auto(0x0, &(0x7f0000000180)={0xf, 0xfffffffd, 0x44b, 0x3, 0x5, 0x1007181, 0xd3, 0x400007, 0x3, 0x7ff, 0x800c, 0x80000001, 0x4, 0x80200000000001, 0x200000004, 0xde3, 0x9809588, 0xfffffffd, 0x2, 0x1, 0x864, 0x6, 0x22000, 0x201, 0x4, 0xc3f, 0x2000000, 0x0, 0x0, 0x0, 0x39, [0x0, 0x0, 0x0, 0x7fdf, 0x47, 0x4000000000000, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x4, 0x0, 0x9, 0x7cd, 0x7, 0x2, 0x8000000000000, 0x0, 0xa, 0x0, 0xfffffffffffffffe, 0x0, 0x6, 0x27, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x5, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0xfff]}, 0xa, 0xd) (async) statmount$auto(0x0, &(0x7f0000000180)={0xf, 0xfffffffd, 0x44b, 0x3, 0x5, 0x1007181, 0xd3, 0x400007, 0x3, 0x7ff, 0x800c, 0x80000001, 0x4, 0x80200000000001, 0x200000004, 0xde3, 0x9809588, 0xfffffffd, 0x2, 0x1, 0x864, 0x6, 0x22000, 0x201, 0x4, 0xc3f, 0x2000000, 0x0, 0x0, 0x0, 0x39, [0x0, 0x0, 0x0, 0x7fdf, 0x47, 0x4000000000000, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x4, 0x0, 0x9, 0x7cd, 0x7, 0x2, 0x8000000000000, 0x0, 0xa, 0x0, 0xfffffffffffffffe, 0x0, 0x6, 0x27, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x5, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0xfff]}, 0xa, 0xd) bpf$auto_BPF_PROG_LOAD(0x5, &(0x7f0000000300)=@info={r0, 0x7}, 0x7ff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) 405.950743ms ago: executing program 3 (id=1496): close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) r0 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) r1 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000180), r0) sendmsg$auto_TCP_METRICS_CMD_GET(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0x44, r1, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@TCP_METRICS_ATTR_SADDR_IPV6={0x14, 0xc, @rand_addr=' \x01\x00'}, @TCP_METRICS_ATTR_SADDR_IPV6={0x14, 0xc, @mcast1}, @TCP_METRICS_ATTR_SADDR_IPV4={0x8, 0xb, @rand_addr=0x64010100}]}, 0x44}, 0x1, 0x0, 0x0, 0xc084810}, 0x8850) openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, 0x0, 0xf81e09f4e322f53a, 0x0) madvise$auto(0x4, 0x5, 0x5) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x2) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x20a00, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/veth0_macvtap/hop_limit\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x1ff) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_buffer_subbuf_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/buffer_subbuf_size_kb\x00', 0x101502, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r4, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x487, 0x0, 0x14) bind$auto(0x4, 0xfffffffffffffffe, 0x1fffe) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x29e2c2, 0x0) 221.472595ms ago: executing program 0 (id=1498): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 166.638845ms ago: executing program 3 (id=1499): close_range$auto(0x0, 0xffffeffe, 0x2) r0 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TCP_METRICS_CMD_GET(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x14, r0, 0x89c1beb01534ff9b, 0x70bd29, 0x25dfd3f9}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto_SO_DETACH_REUSEPORT_BPF(r2, 0x1, 0x53, &(0x7f0000000180)='\x91u\xe5?{\x00\x00\x00', 0x7) io_uring_register$auto_IORING_REGISTER_IOWQ_AFF(r2, 0x11, &(0x7f0000000000)="dd0ca3cded3cf3c6", 0x2) 111.430232ms ago: executing program 2 (id=1500): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x12200, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40000, 0x0) (async) get_mempolicy$auto(0xfffffffffffffffe, 0xfffffffffffffffd, 0x2, 0x0, 0x1) (async) mmap$auto(0x3, 0x80002020009, 0x7, 0xfa, 0xffffffffffffffff, 0x400) (async) syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff) setitimer$auto(0x10000, 0x0, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x4) (async) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0xa802, 0x0) (async) mmap$auto(0x0, 0xf6, 0xdf, 0xeb1, 0x401, 0x0) (async) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x189002, 0x0) r1 = ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x10100, 0x0) r3 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) read$auto_rng_chrdev_ops_core(r3, &(0x7f0000001180)=""/4096, 0x1000) (async) socket(0xa, 0x1, 0x84) (async) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000b40), 0xffffffffffffffff) (async) sendmsg$auto_SEG6_CMD_SETHMAC(r4, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x84) sendmsg$auto_SEG6_CMD_DUMPHMAC(r1, &(0x7f0000001040)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000001100)=ANY=[@ANYBLOB, @ANYRES16, @ANYRESDEC=r4, @ANYRESOCT=r2], 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x4000004) unshare$auto(0x40000080) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000001140)='/dev/snd/midiC2D2\x00', 0x1, 0x0) (async) r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r5, &(0x7f0000000000)="c80d1b5d399b58", 0xfdef) sendfile$auto(r0, r0, 0x0, 0x80000000003) (async) mprotect$auto(0x200000000000, 0x806121, 0x8) (async) landlock_create_ruleset$auto(&(0x7f0000000140)={0x100000daa0, 0x401, 0x9}, 0x7ffd, 0x0) 0s ago: executing program 0 (id=1501): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x3000000, 0x0, 0x1, 0x0, 0x10000000000000, 0x2}, 0x895}, 0x3, 0x0) sendmsg$auto_L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1018}, 0x1, 0x0, 0x0, 0xefb7e034ab6a1498}, 0x24000084) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_TASKSTATS_CMD_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010a2bbd7000fbdbdf2501000000070003002c265e00"], 0x1c}, 0x1, 0x0, 0x0, 0x44855}, 0x20008010) r2 = getpid() r3 = socket(0x2, 0x80002, 0x73) r4 = socket(0x8, 0x80000, 0x3) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB="f9b15220", @ANYRES64=r2, @ANYBLOB="200025bd7000fddbdf250a0000003e0002002f7379732f6b65726e656c2f74726163696e672f6576656e74732f766d616c6c6f632f616c6c6f635f766d61705f617265612f666f726d617400000008000a0009000000330002002f7379732f6b65726e656c2f64656275672f6e657464657673696d2f6e657464657673696d312f6d61785f766673000008000a000700000008000a00d30000000600010001000000"], 0xa8}, 0x1, 0x0, 0x0, 0x80088c0}, 0x10) getsockopt$auto(r3, 0x0, 0x3, 0x0, &(0x7f0000000080)=0x3ff) close_range$auto(0x0, 0x5, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) r5 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) write$auto_snd_seq_f_ops_seq_clientmgr(r5, &(0x7f00000001c0)="624d1bfe595046ab5c98199adf260600de16baef6176e6021e1dce210500e8fdffff0000000000fffffffe00a7ed73de11691c13403c82be", 0x7b) socket(0x10, 0x3, 0x6) socket(0x10, 0x4, 0x4) mmap$auto(0x0, 0x2020009, 0xffffffffffffffff, 0x80000011, 0xfffffffffffffffa, 0x8000) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r6, 0x0, 0x7) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x20802, 0x0) socket(0x10, 0x2, 0x0) r7 = open(0x0, 0x22240, 0x0) statx$auto(r7, 0x0, 0x1003, 0x4005, 0x0) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x102, 0x0) kernel console output (not intermixed with test programs): T11628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.897453][T11628] RIP: 0033:0x7fdf6759de59 [ 466.897473][T11628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 466.897498][T11628] RSP: 002b:00007fdf683b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 466.897521][T11628] RAX: ffffffffffffffda RBX: 00007fdf67825fa0 RCX: 00007fdf6759de59 [ 466.897569][T11628] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000004 [ 466.897589][T11628] RBP: 00007fdf67633e6f R08: 0000000000000014 R09: 0000000000000000 [ 466.897610][T11628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 466.897636][T11628] R13: 00007fdf67826038 R14: 00007fdf67825fa0 R15: 00007fff655af898 [ 466.897668][T11628] [ 467.761729][T11639] netlink: 'syz.2.1232': attribute type 1 has an invalid length. [ 467.796907][T11639] netlink: 33 bytes leftover after parsing attributes in process `syz.2.1232'. [ 468.327349][T11655] FAULT_INJECTION: forcing a failure. [ 468.327349][T11655] name failslab, interval 1, probability 0, space 0, times 0 [ 468.340107][T11655] CPU: 0 UID: 0 PID: 11655 Comm: syz.3.1236 Not tainted syzkaller #0 PREEMPT(full) [ 468.340141][T11655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 468.340157][T11655] Call Trace: [ 468.340166][T11655] [ 468.340177][T11655] dump_stack_lvl+0x100/0x190 [ 468.340209][T11655] should_fail_ex.cold+0x5/0xa [ 468.340236][T11655] should_failslab+0xc2/0x120 [ 468.340269][T11655] __kmalloc_cache_noprof+0x91/0x6c0 [ 468.340308][T11655] ? net_generic+0xea/0x2a0 [ 468.340335][T11655] ? tipc_service_create+0xb1/0x340 [ 468.340368][T11655] tipc_service_create+0xb1/0x340 [ 468.340395][T11655] ? tipc_service_find+0x161/0x1c0 [ 468.340428][T11655] tipc_nametbl_subscribe+0x892/0xa80 [ 468.340462][T11655] ? kasan_save_track+0x14/0x30 [ 468.340490][T11655] ? __pfx_tipc_nametbl_subscribe+0x10/0x10 [ 468.340521][T11655] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 468.340562][T11655] ? lockdep_init_map_type+0x5c/0x250 [ 468.340605][T11655] tipc_sub_subscribe+0x4ba/0x730 [ 468.340634][T11655] tipc_conn_rcv_sub+0x21e/0x3d0 [ 468.340676][T11655] tipc_topsrv_kern_subscr+0x20b/0x3c0 [ 468.340719][T11655] ? __pfx_tipc_topsrv_kern_subscr+0x10/0x10 [ 468.340762][T11655] ? net_generic+0xea/0x2a0 [ 468.340791][T11655] tipc_group_create+0x4ab/0x660 [ 468.340819][T11655] tipc_setsockopt+0x611/0xe30 [ 468.340852][T11655] ? __pfx_tipc_setsockopt+0x10/0x10 [ 468.340895][T11655] ? __pfx_tipc_setsockopt+0x10/0x10 [ 468.340934][T11655] do_sock_setsockopt+0xf3/0x1d0 [ 468.340972][T11655] __sys_setsockopt+0x119/0x190 [ 468.341005][T11655] __x64_sys_setsockopt+0xbd/0x160 [ 468.341031][T11655] ? do_syscall_64+0x90/0x840 [ 468.341053][T11655] ? lockdep_hardirqs_on+0x78/0x100 [ 468.341092][T11655] do_syscall_64+0x115/0x840 [ 468.341113][T11655] ? clear_bhb_loop+0x40/0x90 [ 468.341143][T11655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.341168][T11655] RIP: 0033:0x7faf02d9de59 [ 468.341189][T11655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 468.341213][T11655] RSP: 002b:00007faf03c8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 468.341237][T11655] RAX: ffffffffffffffda RBX: 00007faf03025fa0 RCX: 00007faf02d9de59 [ 468.341253][T11655] RDX: 0000000000000087 RSI: 000000000000010f RDI: 000000000000000a [ 468.341268][T11655] RBP: 00007faf02e33e6f R08: 0000000000000014 R09: 0000000000000000 [ 468.341283][T11655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 468.341298][T11655] R13: 00007faf03026038 R14: 00007faf03025fa0 R15: 00007ffd02b683d8 [ 468.341329][T11655] [ 468.341340][T11655] tipc: Service creation failed, no memory [ 468.602159][T11655] tipc: Failed to subscribe for {63490464,0,4294967295} [ 468.880156][T11662] netlink: 'syz.0.1238': attribute type 1 has an invalid length. [ 468.909545][T11662] netlink: 33 bytes leftover after parsing attributes in process `syz.0.1238'. [ 468.919327][T11645] Process accounting paused [ 469.042227][T11670] FAULT_INJECTION: forcing a failure. [ 469.042227][T11670] name failslab, interval 1, probability 0, space 0, times 0 [ 469.062558][T11670] CPU: 0 UID: 0 PID: 11670 Comm: syz.1.1241 Not tainted syzkaller #0 PREEMPT(full) [ 469.062606][T11670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 469.062629][T11670] Call Trace: [ 469.062641][T11670] [ 469.062655][T11670] dump_stack_lvl+0x100/0x190 [ 469.062700][T11670] should_fail_ex.cold+0x5/0xa [ 469.062740][T11670] should_failslab+0xc2/0x120 [ 469.062785][T11670] __kmalloc_cache_noprof+0x91/0x6c0 [ 469.062842][T11670] ? find_held_lock+0x2b/0x80 [ 469.062883][T11670] ? tipc_conn_alloc+0x48/0x590 [ 469.062947][T11670] tipc_conn_alloc+0x48/0x590 [ 469.063004][T11670] tipc_topsrv_kern_subscr+0x11c/0x3c0 [ 469.063065][T11670] ? __pfx_tipc_topsrv_kern_subscr+0x10/0x10 [ 469.063127][T11670] ? net_generic+0xea/0x2a0 [ 469.063169][T11670] tipc_group_create+0x4ab/0x660 [ 469.063211][T11670] tipc_setsockopt+0x611/0xe30 [ 469.063259][T11670] ? __pfx_tipc_setsockopt+0x10/0x10 [ 469.063328][T11670] ? __pfx_tipc_setsockopt+0x10/0x10 [ 469.063374][T11670] do_sock_setsockopt+0xf3/0x1d0 [ 469.063427][T11670] __sys_setsockopt+0x119/0x190 [ 469.063475][T11670] __x64_sys_setsockopt+0xbd/0x160 [ 469.063513][T11670] ? do_syscall_64+0x90/0x840 [ 469.063545][T11670] ? lockdep_hardirqs_on+0x78/0x100 [ 469.063599][T11670] do_syscall_64+0x115/0x840 [ 469.063628][T11670] ? clear_bhb_loop+0x40/0x90 [ 469.063672][T11670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.063707][T11670] RIP: 0033:0x7f68cff9de59 [ 469.063736][T11670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 469.063771][T11670] RSP: 002b:00007f68d0f07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 469.063807][T11670] RAX: ffffffffffffffda RBX: 00007f68d0225fa0 RCX: 00007f68cff9de59 [ 469.063830][T11670] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000004 [ 469.063851][T11670] RBP: 00007f68d0033e6f R08: 0000000000000014 R09: 0000000000000000 [ 469.063874][T11670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 469.063896][T11670] R13: 00007f68d0226038 R14: 00007f68d0225fa0 R15: 00007ffe4adb20f8 [ 469.063942][T11670] [ 471.654725][T11732] FAULT_INJECTION: forcing a failure. [ 471.654725][T11732] name failslab, interval 1, probability 0, space 0, times 0 [ 471.667493][T11732] CPU: 0 UID: 0 PID: 11732 Comm: syz.2.1257 Not tainted syzkaller #0 PREEMPT(full) [ 471.667542][T11732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 471.667564][T11732] Call Trace: [ 471.667575][T11732] [ 471.667587][T11732] dump_stack_lvl+0x100/0x190 [ 471.667634][T11732] should_fail_ex.cold+0x5/0xa [ 471.667675][T11732] should_failslab+0xc2/0x120 [ 471.667721][T11732] __kmalloc_cache_noprof+0x91/0x6c0 [ 471.667775][T11732] ? net_generic+0xea/0x2a0 [ 471.667824][T11732] ? tipc_service_create+0xb1/0x340 [ 471.667873][T11732] tipc_service_create+0xb1/0x340 [ 471.667911][T11732] ? tipc_service_find+0x161/0x1c0 [ 471.667953][T11732] tipc_nametbl_subscribe+0x892/0xa80 [ 471.668001][T11732] ? kasan_save_track+0x14/0x30 [ 471.668042][T11732] ? __pfx_tipc_nametbl_subscribe+0x10/0x10 [ 471.668086][T11732] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 471.668144][T11732] ? lockdep_init_map_type+0x5c/0x250 [ 471.668205][T11732] tipc_sub_subscribe+0x4ba/0x730 [ 471.668247][T11732] tipc_conn_rcv_sub+0x21e/0x3d0 [ 471.668306][T11732] tipc_topsrv_kern_subscr+0x20b/0x3c0 [ 471.668367][T11732] ? __pfx_tipc_topsrv_kern_subscr+0x10/0x10 [ 471.668430][T11732] ? net_generic+0xea/0x2a0 [ 471.668472][T11732] tipc_group_create+0x4ab/0x660 [ 471.668513][T11732] tipc_setsockopt+0x611/0xe30 [ 471.668561][T11732] ? __pfx_tipc_setsockopt+0x10/0x10 [ 471.668622][T11732] ? __pfx_tipc_setsockopt+0x10/0x10 [ 471.668668][T11732] do_sock_setsockopt+0xf3/0x1d0 [ 471.668723][T11732] __sys_setsockopt+0x119/0x190 [ 471.668769][T11732] __x64_sys_setsockopt+0xbd/0x160 [ 471.668806][T11732] ? do_syscall_64+0x90/0x840 [ 471.668845][T11732] ? lockdep_hardirqs_on+0x78/0x100 [ 471.668899][T11732] do_syscall_64+0x115/0x840 [ 471.668929][T11732] ? clear_bhb_loop+0x40/0x90 [ 471.668973][T11732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.669008][T11732] RIP: 0033:0x7fdf6759de59 [ 471.669036][T11732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 471.669070][T11732] RSP: 002b:00007fdf683b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 471.669102][T11732] RAX: ffffffffffffffda RBX: 00007fdf67825fa0 RCX: 00007fdf6759de59 [ 471.669126][T11732] RDX: 0000000000000087 RSI: 000000000000010f RDI: 000000000000000a [ 471.669147][T11732] RBP: 00007fdf67633e6f R08: 0000000000000014 R09: 0000000000000000 [ 471.669168][T11732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 471.669191][T11732] R13: 00007fdf67826038 R14: 00007fdf67825fa0 R15: 00007fff655af898 [ 471.669238][T11732] [ 471.923809][T11732] tipc: Service creation failed, no memory [ 471.929721][T11732] tipc: Failed to subscribe for {1748724128,0,4294967295} [ 472.938214][T11752] netlink: 'syz.0.1261': attribute type 1 has an invalid length. [ 472.946168][T11752] netlink: 33 bytes leftover after parsing attributes in process `syz.0.1261'. [ 473.632589][T11770] FAULT_INJECTION: forcing a failure. [ 473.632589][T11770] name failslab, interval 1, probability 0, space 0, times 0 [ 473.664778][T11770] CPU: 1 UID: 0 PID: 11770 Comm: syz.3.1265 Not tainted syzkaller #0 PREEMPT(full) [ 473.664830][T11770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 473.664854][T11770] Call Trace: [ 473.664867][T11770] [ 473.664881][T11770] dump_stack_lvl+0x100/0x190 [ 473.664928][T11770] should_fail_ex.cold+0x5/0xa [ 473.664962][T11770] ? __lock_acquire+0x49f/0x1a40 [ 473.665019][T11770] should_failslab+0xc2/0x120 [ 473.665078][T11770] __kmalloc_cache_noprof+0x91/0x6c0 [ 473.665137][T11770] ? tipc_sub_subscribe+0x15c/0x730 [ 473.665182][T11770] tipc_sub_subscribe+0x15c/0x730 [ 473.665241][T11770] tipc_conn_rcv_sub+0x21e/0x3d0 [ 473.665301][T11770] tipc_topsrv_kern_subscr+0x20b/0x3c0 [ 473.665363][T11770] ? __pfx_tipc_topsrv_kern_subscr+0x10/0x10 [ 473.665424][T11770] ? net_generic+0xea/0x2a0 [ 473.665465][T11770] tipc_group_create+0x4ab/0x660 [ 473.665507][T11770] tipc_setsockopt+0x611/0xe30 [ 473.665554][T11770] ? __pfx_tipc_setsockopt+0x10/0x10 [ 473.665616][T11770] ? __pfx_tipc_setsockopt+0x10/0x10 [ 473.665661][T11770] do_sock_setsockopt+0xf3/0x1d0 [ 473.665714][T11770] __sys_setsockopt+0x119/0x190 [ 473.665761][T11770] __x64_sys_setsockopt+0xbd/0x160 [ 473.665798][T11770] ? do_syscall_64+0x90/0x840 [ 473.665831][T11770] ? lockdep_hardirqs_on+0x78/0x100 [ 473.665883][T11770] do_syscall_64+0x115/0x840 [ 473.665913][T11770] ? clear_bhb_loop+0x40/0x90 [ 473.665955][T11770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.665993][T11770] RIP: 0033:0x7faf02d9de59 [ 473.666024][T11770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.666067][T11770] RSP: 002b:00007faf03c8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 473.666103][T11770] RAX: ffffffffffffffda RBX: 00007faf03025fa0 RCX: 00007faf02d9de59 [ 473.666127][T11770] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000004 [ 473.666149][T11770] RBP: 00007faf02e33e6f R08: 0000000000000014 R09: 0000000000000000 [ 473.666176][T11770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 473.666197][T11770] R13: 00007faf03026038 R14: 00007faf03025fa0 R15: 00007ffd02b683d8 [ 473.666242][T11770] [ 473.889040][T11770] tipc: Subscription rejected, no memory [ 475.619619][T11792] netlink: 'syz.2.1272': attribute type 1 has an invalid length. [ 475.655748][T11792] netlink: 33 bytes leftover after parsing attributes in process `syz.2.1272'. [ 476.023007][T11802] netlink: 'syz.2.1274': attribute type 1 has an invalid length. [ 476.043503][T11802] netlink: 33 bytes leftover after parsing attributes in process `syz.2.1274'. [ 476.353400][T11812] netlink: 'syz.0.1283': attribute type 1 has an invalid length. [ 476.372821][T11812] netlink: 33 bytes leftover after parsing attributes in process `syz.0.1283'. [ 476.820466][T11823] FAULT_INJECTION: forcing a failure. [ 476.820466][T11823] name failslab, interval 1, probability 0, space 0, times 0 [ 476.833466][T11823] CPU: 1 UID: 0 PID: 11823 Comm: syz.1.1278 Not tainted syzkaller #0 PREEMPT(full) [ 476.833512][T11823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 476.833535][T11823] Call Trace: [ 476.833546][T11823] [ 476.833560][T11823] dump_stack_lvl+0x100/0x190 [ 476.833605][T11823] should_fail_ex.cold+0x5/0xa [ 476.833645][T11823] should_failslab+0xc2/0x120 [ 476.833691][T11823] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 476.833735][T11823] ? __alloc_skb+0x140/0x710 [ 476.833869][T11823] __alloc_skb+0x140/0x710 [ 476.833906][T11823] ? __pfx___alloc_skb+0x10/0x10 [ 476.833956][T11823] ? do_raw_write_lock+0x11e/0x260 [ 476.833999][T11823] tipc_buf_acquire+0x26/0xe0 [ 476.834086][T11823] named_prepare_buf+0x29/0x170 [ 476.834146][T11823] tipc_named_publish+0x1f2/0x760 [ 476.834208][T11823] tipc_nametbl_publish+0x17b/0x260 [ 476.834254][T11823] tipc_sk_publish+0x1d8/0x430 [ 476.834297][T11823] ? __pfx_tipc_sk_publish+0x10/0x10 [ 476.834342][T11823] ? tipc_group_create+0x4c0/0x660 [ 476.834382][T11823] tipc_setsockopt+0x7af/0xe30 [ 476.834429][T11823] ? __pfx_tipc_setsockopt+0x10/0x10 [ 476.834490][T11823] ? __pfx_tipc_setsockopt+0x10/0x10 [ 476.834535][T11823] do_sock_setsockopt+0xf3/0x1d0 [ 476.834588][T11823] __sys_setsockopt+0x119/0x190 [ 476.834635][T11823] __x64_sys_setsockopt+0xbd/0x160 [ 476.834671][T11823] ? do_syscall_64+0x90/0x840 [ 476.834703][T11823] ? lockdep_hardirqs_on+0x78/0x100 [ 476.834756][T11823] do_syscall_64+0x115/0x840 [ 476.834787][T11823] ? clear_bhb_loop+0x40/0x90 [ 476.834834][T11823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.834869][T11823] RIP: 0033:0x7f68cff9de59 [ 476.834900][T11823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 476.834941][T11823] RSP: 002b:00007f68d0f07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 476.834975][T11823] RAX: ffffffffffffffda RBX: 00007f68d0225fa0 RCX: 00007f68cff9de59 [ 476.834999][T11823] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000009 [ 476.835021][T11823] RBP: 00007f68d0033e6f R08: 0000000000000014 R09: 0000000000000000 [ 476.835043][T11823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 476.835065][T11823] R13: 00007f68d0226038 R14: 00007f68d0225fa0 R15: 00007ffe4adb20f8 [ 476.835116][T11823] [ 476.835158][T11823] tipc: Publication distribution failure [ 477.280745][T11827] nla_validate_range_unsigned: 1 callbacks suppressed [ 477.280768][T11827] netlink: 'syz.3.1279': attribute type 11 has an invalid length. [ 477.343521][T11827] netlink: 'syz.3.1279': attribute type 11 has an invalid length. [ 477.373578][T11827] netlink: 'syz.3.1279': attribute type 11 has an invalid length. [ 477.405025][T11827] netlink: 'syz.3.1279': attribute type 11 has an invalid length. [ 477.435143][T11827] netlink: 'syz.3.1279': attribute type 11 has an invalid length. [ 477.454360][T11827] netlink: 'syz.3.1279': attribute type 11 has an invalid length. [ 477.479440][T11827] netlink: 'syz.3.1279': attribute type 11 has an invalid length. [ 477.495462][T11832] FAULT_INJECTION: forcing a failure. [ 477.495462][T11832] name failslab, interval 1, probability 0, space 0, times 0 [ 477.508192][T11832] CPU: 1 UID: 0 PID: 11832 Comm: syz.1.1280 Not tainted syzkaller #0 PREEMPT(full) [ 477.508225][T11832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 477.508243][T11832] Call Trace: [ 477.508253][T11832] [ 477.508262][T11832] dump_stack_lvl+0x100/0x190 [ 477.508296][T11832] should_fail_ex.cold+0x5/0xa [ 477.508323][T11832] should_failslab+0xc2/0x120 [ 477.508356][T11832] __kmalloc_cache_noprof+0x91/0x6c0 [ 477.508394][T11832] ? net_generic+0xea/0x2a0 [ 477.508422][T11832] ? tipc_service_create+0xb1/0x340 [ 477.508455][T11832] tipc_service_create+0xb1/0x340 [ 477.508482][T11832] ? tipc_service_find+0x161/0x1c0 [ 477.508511][T11832] tipc_nametbl_subscribe+0x892/0xa80 [ 477.508545][T11832] ? kasan_save_track+0x14/0x30 [ 477.508573][T11832] ? __pfx_tipc_nametbl_subscribe+0x10/0x10 [ 477.508604][T11832] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 477.508645][T11832] ? lockdep_init_map_type+0x5c/0x250 [ 477.508688][T11832] tipc_sub_subscribe+0x4ba/0x730 [ 477.508716][T11832] tipc_conn_rcv_sub+0x21e/0x3d0 [ 477.508764][T11832] tipc_topsrv_kern_subscr+0x20b/0x3c0 [ 477.508807][T11832] ? __pfx_tipc_topsrv_kern_subscr+0x10/0x10 [ 477.508852][T11832] ? net_generic+0xea/0x2a0 [ 477.508881][T11832] tipc_group_create+0x4ab/0x660 [ 477.508910][T11832] tipc_setsockopt+0x611/0xe30 [ 477.508943][T11832] ? __pfx_tipc_setsockopt+0x10/0x10 [ 477.508986][T11832] ? __pfx_tipc_setsockopt+0x10/0x10 [ 477.509018][T11832] do_sock_setsockopt+0xf3/0x1d0 [ 477.509057][T11832] __sys_setsockopt+0x119/0x190 [ 477.509089][T11832] __x64_sys_setsockopt+0xbd/0x160 [ 477.509115][T11832] ? do_syscall_64+0x90/0x840 [ 477.509137][T11832] ? lockdep_hardirqs_on+0x78/0x100 [ 477.509176][T11832] do_syscall_64+0x115/0x840 [ 477.509197][T11832] ? clear_bhb_loop+0x40/0x90 [ 477.509227][T11832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.509255][T11832] RIP: 0033:0x7f68cff9de59 [ 477.509276][T11832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 477.509301][T11832] RSP: 002b:00007f68d0f07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 477.509356][T11832] RAX: ffffffffffffffda RBX: 00007f68d0225fa0 RCX: 00007f68cff9de59 [ 477.509383][T11832] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000009 [ 477.509399][T11832] RBP: 00007f68d0033e6f R08: 0000000000000014 R09: 0000000000000000 [ 477.509414][T11832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 477.509430][T11832] R13: 00007f68d0226038 R14: 00007f68d0225fa0 R15: 00007ffe4adb20f8 [ 477.509462][T11832] [ 477.509473][T11832] tipc: Service creation failed, no memory [ 477.518750][T11827] netlink: 'syz.3.1279': attribute type 11 has an invalid length. [ 477.518864][T11827] netlink: 'syz.3.1279': attribute type 11 has an invalid length. [ 477.518888][T11827] netlink: 'syz.3.1279': attribute type 11 has an invalid length. [ 477.793513][T11832] tipc: Failed to subscribe for {3505420704,0,4294967295} [ 477.806567][T11834] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1281'. [ 477.859398][T11827] netlink: zone id is out of range [ 477.887795][T11827] netlink: zone id is out of range [ 477.903699][T11827] netlink: zone id is out of range [ 477.919120][T11827] netlink: zone id is out of range [ 477.985695][T11827] netlink: zone id is out of range [ 478.050101][T11827] netlink: zone id is out of range [ 478.078425][T11827] netlink: zone id is out of range [ 478.088150][T11827] netlink: zone id is out of range [ 478.093398][T11827] netlink: zone id is out of range [ 478.100296][T11827] netlink: zone id is out of range [ 478.988823][T11860] netlink: 'syz.2.1286': attribute type 1 has an invalid length. [ 479.007344][T11860] netlink: 33 bytes leftover after parsing attributes in process `syz.2.1286'. [ 479.391607][T11867] FAULT_INJECTION: forcing a failure. [ 479.391607][T11867] name failslab, interval 1, probability 0, space 0, times 0 [ 479.454668][T11867] CPU: 1 UID: 0 PID: 11867 Comm: syz.2.1287 Not tainted syzkaller #0 PREEMPT(full) [ 479.454714][T11867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 479.454735][T11867] Call Trace: [ 479.454748][T11867] [ 479.454762][T11867] dump_stack_lvl+0x100/0x190 [ 479.454808][T11867] should_fail_ex.cold+0x5/0xa [ 479.454858][T11867] should_failslab+0xc2/0x120 [ 479.454912][T11867] __kmalloc_cache_noprof+0x91/0x6c0 [ 479.454970][T11867] ? proc_self_get_link+0x189/0x1f0 [ 479.455027][T11867] proc_self_get_link+0x189/0x1f0 [ 479.455077][T11867] pick_link+0xac2/0x13c0 [ 479.455136][T11867] ? __pfx_proc_self_get_link+0x10/0x10 [ 479.455192][T11867] step_into_slowpath+0x9ba/0xf90 [ 479.455250][T11867] ? __pfx_step_into_slowpath+0x10/0x10 [ 479.455320][T11867] ? lookup_fast+0x2da/0x600 [ 479.455370][T11867] ? inode_permission+0x374/0x620 [ 479.455423][T11867] link_path_walk+0xf28/0x1cc0 [ 479.455487][T11867] path_openat+0x1c9/0x4280 [ 479.455555][T11867] ? __kasan_slab_alloc+0x89/0x90 [ 479.455597][T11867] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 479.455635][T11867] ? do_getname+0x35/0x390 [ 479.455674][T11867] ? __x64_sys_openat+0x12d/0x210 [ 479.455731][T11867] ? __pfx_path_openat+0x10/0x10 [ 479.455798][T11867] do_file_open+0x20e/0x430 [ 479.455859][T11867] ? __pfx_do_file_open+0x10/0x10 [ 479.455944][T11867] ? alloc_fd+0x471/0x7a0 [ 479.456000][T11867] ? do_getname+0x191/0x390 [ 479.456043][T11867] do_sys_openat2+0x10f/0x1e0 [ 479.456086][T11867] ? __pfx_do_sys_openat2+0x10/0x10 [ 479.456129][T11867] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 479.456200][T11867] __x64_sys_openat+0x12d/0x210 [ 479.456243][T11867] ? __pfx___x64_sys_openat+0x10/0x10 [ 479.456303][T11867] do_syscall_64+0x115/0x840 [ 479.456334][T11867] ? clear_bhb_loop+0x40/0x90 [ 479.456377][T11867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.456414][T11867] RIP: 0033:0x7fdf6759de59 [ 479.456443][T11867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 479.456479][T11867] RSP: 002b:00007fdf657f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 479.456512][T11867] RAX: ffffffffffffffda RBX: 00007fdf67826180 RCX: 00007fdf6759de59 [ 479.456543][T11867] RDX: 0000000000000401 RSI: 0000200000001640 RDI: ffffffffffffff9c [ 479.456565][T11867] RBP: 00007fdf67633e6f R08: 0000000000000000 R09: 0000000000000000 [ 479.456587][T11867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 479.456609][T11867] R13: 00007fdf67826218 R14: 00007fdf67826180 R15: 00007fff655af898 [ 479.456654][T11867] [ 479.992361][T11849] Process accounting resumed [ 480.156860][T11873] FAULT_INJECTION: forcing a failure. [ 480.156860][T11873] name failslab, interval 1, probability 0, space 0, times 0 [ 480.169669][T11873] CPU: 0 UID: 0 PID: 11873 Comm: syz.3.1290 Not tainted syzkaller #0 PREEMPT(full) [ 480.169719][T11873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 480.169741][T11873] Call Trace: [ 480.169754][T11873] [ 480.169768][T11873] dump_stack_lvl+0x100/0x190 [ 480.169815][T11873] should_fail_ex.cold+0x5/0xa [ 480.169856][T11873] should_failslab+0xc2/0x120 [ 480.169901][T11873] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 480.169952][T11873] ? __alloc_skb+0x140/0x710 [ 480.169997][T11873] __alloc_skb+0x140/0x710 [ 480.170032][T11873] ? __pfx___alloc_skb+0x10/0x10 [ 480.170072][T11873] ? do_raw_write_lock+0x11e/0x260 [ 480.170115][T11873] tipc_buf_acquire+0x26/0xe0 [ 480.170171][T11873] named_prepare_buf+0x29/0x170 [ 480.170233][T11873] tipc_named_publish+0x1f2/0x760 [ 480.170297][T11873] tipc_nametbl_publish+0x17b/0x260 [ 480.170346][T11873] tipc_sk_publish+0x1d8/0x430 [ 480.170393][T11873] ? __pfx_tipc_sk_publish+0x10/0x10 [ 480.170440][T11873] ? tipc_group_create+0x4c0/0x660 [ 480.170482][T11873] tipc_setsockopt+0x7af/0xe30 [ 480.170530][T11873] ? __pfx_tipc_setsockopt+0x10/0x10 [ 480.170593][T11873] ? __pfx_tipc_setsockopt+0x10/0x10 [ 480.170640][T11873] do_sock_setsockopt+0xf3/0x1d0 [ 480.170694][T11873] __sys_setsockopt+0x119/0x190 [ 480.170742][T11873] __x64_sys_setsockopt+0xbd/0x160 [ 480.170780][T11873] ? do_syscall_64+0x90/0x840 [ 480.170811][T11873] ? lockdep_hardirqs_on+0x78/0x100 [ 480.170865][T11873] do_syscall_64+0x115/0x840 [ 480.170897][T11873] ? clear_bhb_loop+0x40/0x90 [ 480.170951][T11873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.170989][T11873] RIP: 0033:0x7faf02d9de59 [ 480.171019][T11873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 480.171060][T11873] RSP: 002b:00007faf03c8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 480.171104][T11873] RAX: ffffffffffffffda RBX: 00007faf03025fa0 RCX: 00007faf02d9de59 [ 480.171143][T11873] RDX: 0000000000000087 RSI: 000000000000010f RDI: 000000000000000a [ 480.171168][T11873] RBP: 00007faf02e33e6f R08: 0000000000000014 R09: 0000000000000000 [ 480.171191][T11873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 480.171213][T11873] R13: 00007faf03026038 R14: 00007faf03025fa0 R15: 00007ffd02b683d8 [ 480.171259][T11873] [ 480.171301][T11873] tipc: Publication distribution failure [ 481.114984][T11901] netlink: 'syz.1.1296': attribute type 1 has an invalid length. [ 481.125593][T11901] netlink: 33 bytes leftover after parsing attributes in process `syz.1.1296'. [ 481.859289][T11922] netlink: 'syz.0.1301': attribute type 1 has an invalid length. [ 481.873377][T11922] netlink: 33 bytes leftover after parsing attributes in process `syz.0.1301'. [ 482.581138][T11940] FAULT_INJECTION: forcing a failure. [ 482.581138][T11940] name failslab, interval 1, probability 0, space 0, times 0 [ 482.603626][T11940] CPU: 1 UID: 0 PID: 11940 Comm: syz.1.1305 Not tainted syzkaller #0 PREEMPT(full) [ 482.603675][T11940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 482.603695][T11940] Call Trace: [ 482.603707][T11940] [ 482.603720][T11940] dump_stack_lvl+0x100/0x190 [ 482.603775][T11940] should_fail_ex.cold+0x5/0xa [ 482.603821][T11940] should_failslab+0xc2/0x120 [ 482.603856][T11940] __kmalloc_cache_noprof+0x91/0x6c0 [ 482.603896][T11940] ? mpi_alloc_limb_space+0x31/0x60 [ 482.603927][T11940] ? mpi_alloc+0x46/0x230 [ 482.603962][T11940] mpi_alloc+0x46/0x230 [ 482.603989][T11940] ? mpi_free+0xe6/0x150 [ 482.604019][T11940] mpi_read_raw_data+0xf5/0x430 [ 482.604050][T11940] rsa_set_pub_key+0x14f/0x270 [ 482.604076][T11940] ? __pfx_rsa_set_pub_key+0x10/0x10 [ 482.604113][T11940] ? __asan_memcpy+0x3c/0x60 [ 482.604173][T11940] rsassa_pkcs1_set_pub_key+0xce/0x1f0 [ 482.604220][T11940] public_key_verify_signature+0x4e5/0x910 [ 482.604259][T11940] ? __pfx_public_key_verify_signature+0x10/0x10 [ 482.604306][T11940] ? asymmetric_key_generate_id+0x7e/0x180 [ 482.604342][T11940] x509_check_for_self_signed+0x325/0x510 [ 482.604382][T11940] x509_cert_parse+0x60c/0x910 [ 482.604413][T11940] ? ___sys_sendmsg+0x190/0x1e0 [ 482.604455][T11940] ? __sys_sendmsg+0x160/0x210 [ 482.604496][T11940] ? do_syscall_64+0x115/0x840 [ 482.604522][T11940] pkcs7_extract_cert+0xa4/0x380 [ 482.604564][T11940] asn1_ber_decoder+0x12b3/0x2170 [ 482.604615][T11940] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 482.604660][T11940] ? kasan_save_track+0x14/0x30 [ 482.604687][T11940] ? __kasan_kmalloc+0xaa/0xb0 [ 482.604716][T11940] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 482.604757][T11940] ? pkcs7_parse_message+0x15f/0x870 [ 482.604800][T11940] pkcs7_parse_message+0x289/0x870 [ 482.604841][T11940] verify_pkcs7_signature+0x30/0xa0 [ 482.604869][T11940] valid_regdb+0x211/0x590 [ 482.604903][T11940] ? __pfx_valid_regdb+0x10/0x10 [ 482.604931][T11940] ? __kasan_kmalloc+0xaa/0xb0 [ 482.604968][T11940] reg_reload_regdb+0x11a/0x460 [ 482.605002][T11940] ? __pfx_reg_reload_regdb+0x10/0x10 [ 482.605039][T11940] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 482.605063][T11940] ? nl80211_pre_doit+0x19a/0xae0 [ 482.605095][T11940] genl_family_rcv_msg_doit+0x214/0x300 [ 482.605146][T11940] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 482.605189][T11940] ? genl_get_cmd+0x3e7/0x760 [ 482.605237][T11940] ? bpf_lsm_capable+0x9/0x10 [ 482.605261][T11940] ? security_capable+0x80/0x260 [ 482.605306][T11940] genl_rcv_msg+0x560/0x800 [ 482.605334][T11940] ? __pfx_genl_rcv_msg+0x10/0x10 [ 482.605360][T11940] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 482.605383][T11940] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 482.605415][T11940] ? __pfx_nl80211_post_doit+0x10/0x10 [ 482.605455][T11940] netlink_rcv_skb+0x159/0x420 [ 482.605494][T11940] ? __pfx_genl_rcv_msg+0x10/0x10 [ 482.605521][T11940] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 482.605571][T11940] ? netlink_deliver_tap+0x1ae/0xcc0 [ 482.605612][T11940] genl_rcv+0x28/0x40 [ 482.605632][T11940] netlink_unicast+0x585/0x850 [ 482.605681][T11940] ? __pfx_netlink_unicast+0x10/0x10 [ 482.605728][T11940] netlink_sendmsg+0x8b0/0xda0 [ 482.605772][T11940] ? __pfx_netlink_sendmsg+0x10/0x10 [ 482.605820][T11940] ? apparmor_socket_sendmsg+0x15b/0x270 [ 482.605871][T11940] ____sys_sendmsg+0xa4d/0xbe0 [ 482.605906][T11940] ? __pfx_netlink_sendmsg+0x10/0x10 [ 482.605947][T11940] ? __pfx_____sys_sendmsg+0x10/0x10 [ 482.605998][T11940] ___sys_sendmsg+0x190/0x1e0 [ 482.606038][T11940] ? __pfx____sys_sendmsg+0x10/0x10 [ 482.606073][T11940] ? __lock_acquire+0x49f/0x1a40 [ 482.606172][T11940] __sys_sendmsg+0x160/0x210 [ 482.606212][T11940] ? __pfx___sys_sendmsg+0x10/0x10 [ 482.606257][T11940] do_syscall_64+0x115/0x840 [ 482.606278][T11940] ? clear_bhb_loop+0x40/0x90 [ 482.606308][T11940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.606333][T11940] RIP: 0033:0x7f68cff9de59 [ 482.606355][T11940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 482.606379][T11940] RSP: 002b:00007f68d0f07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 482.606403][T11940] RAX: ffffffffffffffda RBX: 00007f68d0225fa0 RCX: 00007f68cff9de59 [ 482.606419][T11940] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000005 [ 482.606436][T11940] RBP: 00007f68d0033e6f R08: 0000000000000000 R09: 0000000000000000 [ 482.606458][T11940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 482.606473][T11940] R13: 00007f68d0226038 R14: 00007f68d0225fa0 R15: 00007ffe4adb20f8 [ 482.606505][T11940] [ 484.804721][T11970] FAULT_INJECTION: forcing a failure. [ 484.804721][T11970] name failslab, interval 1, probability 0, space 0, times 0 [ 484.859619][T11970] CPU: 0 UID: 0 PID: 11970 Comm: syz.1.1311 Not tainted syzkaller #0 PREEMPT(full) [ 484.859668][T11970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 484.859697][T11970] Call Trace: [ 484.859710][T11970] [ 484.859724][T11970] dump_stack_lvl+0x100/0x190 [ 484.859775][T11970] should_fail_ex.cold+0x5/0xa [ 484.859821][T11970] should_failslab+0xc2/0x120 [ 484.859869][T11970] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 484.859909][T11970] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 484.859964][T11970] ? lockdep_hardirqs_on+0x78/0x100 [ 484.860018][T11970] ? __d_alloc+0x35/0xa50 [ 484.860063][T11970] __d_alloc+0x35/0xa50 [ 484.860103][T11970] ? inode_set_ctime_current+0x283/0x850 [ 484.860143][T11970] d_alloc_pseudo+0x1c/0xc0 [ 484.860186][T11970] alloc_file_pseudo+0x118/0x290 [ 484.860230][T11970] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 484.860283][T11970] ioctx_alloc+0x5d6/0x21a0 [ 484.860428][T11970] ? find_held_lock+0x2b/0x80 [ 484.860474][T11970] ? __pfx_ioctx_alloc+0x10/0x10 [ 484.860518][T11970] __x64_sys_io_setup+0xc9/0x220 [ 484.860557][T11970] do_syscall_64+0x115/0x840 [ 484.860590][T11970] ? clear_bhb_loop+0x40/0x90 [ 484.860634][T11970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.860671][T11970] RIP: 0033:0x7f68cff9de59 [ 484.860702][T11970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 484.860737][T11970] RSP: 002b:00007f68d0ec5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 484.860774][T11970] RAX: ffffffffffffffda RBX: 00007f68d0226180 RCX: 00007f68cff9de59 [ 484.860797][T11970] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000007ffe [ 484.860819][T11970] RBP: 00007f68d0033e6f R08: 0000000000000000 R09: 0000000000000000 [ 484.860840][T11970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 484.860862][T11970] R13: 00007f68d0226218 R14: 00007f68d0226180 R15: 00007ffe4adb20f8 [ 484.860907][T11970] [ 486.641638][T12004] netlink: 206 bytes leftover after parsing attributes in process `syz.0.1320'. [ 486.937790][T12013] nla_validate_range_unsigned: 12 callbacks suppressed [ 486.937812][T12013] netlink: 'syz.3.1323': attribute type 11 has an invalid length. [ 486.979747][T12013] netlink: 'syz.3.1323': attribute type 11 has an invalid length. [ 486.998875][T12013] netlink: 'syz.3.1323': attribute type 11 has an invalid length. [ 487.011926][T12013] netlink: 'syz.3.1323': attribute type 11 has an invalid length. [ 487.026128][T12013] netlink: 'syz.3.1323': attribute type 11 has an invalid length. [ 487.036625][T12013] netlink: 'syz.3.1323': attribute type 11 has an invalid length. [ 487.046293][T12013] netlink: 'syz.3.1323': attribute type 11 has an invalid length. [ 487.055798][T12013] netlink: 'syz.3.1323': attribute type 11 has an invalid length. [ 487.069517][T12013] netlink: 'syz.3.1323': attribute type 11 has an invalid length. [ 487.078809][T12013] netlink: 'syz.3.1323': attribute type 11 has an invalid length. [ 487.291163][T12026] FAULT_INJECTION: forcing a failure. [ 487.291163][T12026] name failslab, interval 1, probability 0, space 0, times 0 [ 487.304031][T12026] CPU: 0 UID: 0 PID: 12026 Comm: syz.2.1327 Not tainted syzkaller #0 PREEMPT(full) [ 487.304077][T12026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 487.304113][T12026] Call Trace: [ 487.304125][T12026] [ 487.304139][T12026] dump_stack_lvl+0x100/0x190 [ 487.304185][T12026] should_fail_ex.cold+0x5/0xa [ 487.304226][T12026] should_failslab+0xc2/0x120 [ 487.304275][T12026] __kmalloc_cache_noprof+0x91/0x6c0 [ 487.304333][T12026] ? tipc_nametbl_insert_publ+0x5a/0x1570 [ 487.304385][T12026] tipc_nametbl_insert_publ+0x5a/0x1570 [ 487.304430][T12026] ? do_raw_spin_lock+0x128/0x260 [ 487.304467][T12026] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 487.304515][T12026] tipc_nametbl_publish+0x137/0x260 [ 487.304565][T12026] tipc_sk_publish+0x1d8/0x430 [ 487.304611][T12026] ? __pfx_tipc_sk_publish+0x10/0x10 [ 487.304658][T12026] ? tipc_group_create+0x4c0/0x660 [ 487.304698][T12026] tipc_setsockopt+0x7af/0xe30 [ 487.304744][T12026] ? __pfx_tipc_setsockopt+0x10/0x10 [ 487.304806][T12026] ? __pfx_tipc_setsockopt+0x10/0x10 [ 487.304850][T12026] do_sock_setsockopt+0xf3/0x1d0 [ 487.304905][T12026] __sys_setsockopt+0x119/0x190 [ 487.304961][T12026] __x64_sys_setsockopt+0xbd/0x160 [ 487.305002][T12026] ? do_syscall_64+0x90/0x840 [ 487.305034][T12026] ? lockdep_hardirqs_on+0x78/0x100 [ 487.305095][T12026] do_syscall_64+0x115/0x840 [ 487.305126][T12026] ? clear_bhb_loop+0x40/0x90 [ 487.305169][T12026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.305206][T12026] RIP: 0033:0x7fdf6759de59 [ 487.305236][T12026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.305271][T12026] RSP: 002b:00007fdf683b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 487.305305][T12026] RAX: ffffffffffffffda RBX: 00007fdf67825fa0 RCX: 00007fdf6759de59 [ 487.305328][T12026] RDX: 0000000000000087 RSI: 000000000000010f RDI: 000000000000000a [ 487.305349][T12026] RBP: 00007fdf67633e6f R08: 0000000000000014 R09: 0000000000000000 [ 487.305372][T12026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 487.305392][T12026] R13: 00007fdf67826038 R14: 00007fdf67825fa0 R15: 00007fff655af898 [ 487.305434][T12026] [ 487.584918][T12024] FAULT_INJECTION: forcing a failure. [ 487.584918][T12024] name failslab, interval 1, probability 0, space 0, times 0 [ 487.627431][T12024] CPU: 1 UID: 0 PID: 12024 Comm: syz.1.1325 Not tainted syzkaller #0 PREEMPT(full) [ 487.627483][T12024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 487.627507][T12024] Call Trace: [ 487.627523][T12024] [ 487.627536][T12024] dump_stack_lvl+0x100/0x190 [ 487.627585][T12024] should_fail_ex.cold+0x5/0xa [ 487.627625][T12024] should_failslab+0xc2/0x120 [ 487.627671][T12024] __kmalloc_noprof+0xfc/0x820 [ 487.627711][T12024] ? __memcg_list_lru_alloc+0x418/0x680 [ 487.627776][T12024] __memcg_list_lru_alloc+0x418/0x680 [ 487.627832][T12024] ? xa_load+0x149/0x2c0 [ 487.627886][T12024] ? __pfx___memcg_list_lru_alloc+0x10/0x10 [ 487.627951][T12024] ? rcu_read_unlock+0x17/0x60 [ 487.628009][T12024] memcg_list_lru_alloc+0xd3/0x100 [ 487.628047][T12024] __memcg_slab_post_alloc_hook+0x28b/0x1160 [ 487.628112][T12024] ? kasan_save_track+0x14/0x30 [ 487.628155][T12024] kmem_cache_alloc_lru_noprof+0x583/0x6a0 [ 487.628194][T12024] ? lockdep_hardirqs_on+0x78/0x100 [ 487.628248][T12024] ? __d_alloc+0x35/0xa50 [ 487.628289][T12024] __d_alloc+0x35/0xa50 [ 487.628326][T12024] ? inode_set_ctime_current+0x283/0x850 [ 487.628366][T12024] d_alloc_pseudo+0x1c/0xc0 [ 487.628419][T12024] alloc_file_pseudo+0x118/0x290 [ 487.628473][T12024] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 487.628528][T12024] ioctx_alloc+0x5d6/0x21a0 [ 487.628563][T12024] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 487.628617][T12024] ? find_held_lock+0x2b/0x80 [ 487.628659][T12024] ? __pfx_ioctx_alloc+0x10/0x10 [ 487.628704][T12024] __x64_sys_io_setup+0xc9/0x220 [ 487.628743][T12024] do_syscall_64+0x115/0x840 [ 487.628774][T12024] ? clear_bhb_loop+0x40/0x90 [ 487.628817][T12024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.628853][T12024] RIP: 0033:0x7f68cff9de59 [ 487.628882][T12024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.628920][T12024] RSP: 002b:00007f68d0ec5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 487.628955][T12024] RAX: ffffffffffffffda RBX: 00007f68d0226180 RCX: 00007f68cff9de59 [ 487.628980][T12024] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000007ffe [ 487.629001][T12024] RBP: 00007f68d0033e6f R08: 0000000000000000 R09: 0000000000000000 [ 487.629024][T12024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 487.629045][T12024] R13: 00007f68d0226218 R14: 00007f68d0226180 R15: 00007ffe4adb20f8 [ 487.629090][T12024] [ 488.079800][T12028] FAULT_INJECTION: forcing a failure. [ 488.079800][T12028] name failslab, interval 1, probability 0, space 0, times 0 [ 488.092578][T12028] CPU: 1 UID: 0 PID: 12028 Comm: syz.3.1330 Not tainted syzkaller #0 PREEMPT(full) [ 488.092625][T12028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 488.092647][T12028] Call Trace: [ 488.092660][T12028] [ 488.092673][T12028] dump_stack_lvl+0x100/0x190 [ 488.092717][T12028] should_fail_ex.cold+0x5/0xa [ 488.092756][T12028] should_failslab+0xc2/0x120 [ 488.092818][T12028] __kmalloc_cache_noprof+0x91/0x6c0 [ 488.092871][T12028] ? net_generic+0xea/0x2a0 [ 488.092910][T12028] ? tipc_service_create+0xb1/0x340 [ 488.092957][T12028] tipc_service_create+0xb1/0x340 [ 488.092995][T12028] ? tipc_service_find+0x161/0x1c0 [ 488.093036][T12028] tipc_nametbl_subscribe+0x892/0xa80 [ 488.093086][T12028] ? kasan_save_track+0x14/0x30 [ 488.093125][T12028] ? __pfx_tipc_nametbl_subscribe+0x10/0x10 [ 488.093168][T12028] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 488.093224][T12028] ? lockdep_init_map_type+0x5c/0x250 [ 488.093282][T12028] tipc_sub_subscribe+0x4ba/0x730 [ 488.093323][T12028] tipc_conn_rcv_sub+0x21e/0x3d0 [ 488.093380][T12028] tipc_topsrv_kern_subscr+0x20b/0x3c0 [ 488.093439][T12028] ? __pfx_tipc_topsrv_kern_subscr+0x10/0x10 [ 488.093499][T12028] ? net_generic+0xea/0x2a0 [ 488.093542][T12028] tipc_group_create+0x4ab/0x660 [ 488.093582][T12028] tipc_setsockopt+0x611/0xe30 [ 488.093627][T12028] ? __pfx_tipc_setsockopt+0x10/0x10 [ 488.093688][T12028] ? __pfx_tipc_setsockopt+0x10/0x10 [ 488.093736][T12028] do_sock_setsockopt+0xf3/0x1d0 [ 488.093801][T12028] __sys_setsockopt+0x119/0x190 [ 488.093844][T12028] __x64_sys_setsockopt+0xbd/0x160 [ 488.093877][T12028] ? do_syscall_64+0x90/0x840 [ 488.093905][T12028] ? lockdep_hardirqs_on+0x78/0x100 [ 488.093954][T12028] do_syscall_64+0x115/0x840 [ 488.093981][T12028] ? clear_bhb_loop+0x40/0x90 [ 488.094019][T12028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.094052][T12028] RIP: 0033:0x7faf02d9de59 [ 488.094078][T12028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 488.094110][T12028] RSP: 002b:00007faf03c8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 488.094140][T12028] RAX: ffffffffffffffda RBX: 00007faf03025fa0 RCX: 00007faf02d9de59 [ 488.094162][T12028] RDX: 0000000000000087 RSI: 000000000000010f RDI: 000000000000000a [ 488.094182][T12028] RBP: 00007faf02e33e6f R08: 0000000000000014 R09: 0000000000000000 [ 488.094201][T12028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 488.094220][T12028] R13: 00007faf03026038 R14: 00007faf03025fa0 R15: 00007ffd02b683d8 [ 488.094262][T12028] [ 488.094274][T12028] tipc: Service creation failed, no memory [ 488.356388][T12028] tipc: Failed to subscribe for {63490464,0,4294967295} [ 488.698304][T12041] netlink: 206 bytes leftover after parsing attributes in process `syz.3.1332'. [ 488.725375][T12043] FAULT_INJECTION: forcing a failure. [ 488.725375][T12043] name failslab, interval 1, probability 0, space 0, times 0 [ 488.763138][T12043] CPU: 1 UID: 0 PID: 12043 Comm: syz.1.1334 Not tainted syzkaller #0 PREEMPT(full) [ 488.763187][T12043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 488.763209][T12043] Call Trace: [ 488.763220][T12043] [ 488.763234][T12043] dump_stack_lvl+0x100/0x190 [ 488.763280][T12043] should_fail_ex.cold+0x5/0xa [ 488.763321][T12043] should_failslab+0xc2/0x120 [ 488.763370][T12043] __kmalloc_cache_noprof+0x91/0x6c0 [ 488.763426][T12043] ? mpi_alloc+0x46/0x230 [ 488.763476][T12043] mpi_alloc+0x46/0x230 [ 488.763517][T12043] mpi_read_raw_from_sgl+0x251/0x620 [ 488.763562][T12043] ? __pfx_mpi_read_raw_from_sgl+0x10/0x10 [ 488.763599][T12043] ? kasan_save_track+0x14/0x30 [ 488.763638][T12043] ? __kasan_kmalloc+0xaa/0xb0 [ 488.763686][T12043] ? mpi_alloc+0x46/0x230 [ 488.763737][T12043] rsa_enc+0x15d/0x3b0 [ 488.763784][T12043] ? __pfx_rsa_enc+0x10/0x10 [ 488.763820][T12043] ? __virt_addr_valid+0x239/0x430 [ 488.763855][T12043] ? sg_init_one+0xf5/0x1b0 [ 488.763898][T12043] rsassa_pkcs1_verify+0x4eb/0xc20 [ 488.763954][T12043] ? __pfx_rsassa_pkcs1_verify+0x10/0x10 [ 488.764035][T12043] ? rsa_max_size+0xd/0x70 [ 488.764069][T12043] ? rsassa_pkcs1_set_pub_key+0x17d/0x1f0 [ 488.764119][T12043] public_key_verify_signature+0x5ee/0x910 [ 488.764175][T12043] ? __pfx_public_key_verify_signature+0x10/0x10 [ 488.764243][T12043] ? asymmetric_key_generate_id+0x7e/0x180 [ 488.764294][T12043] x509_check_for_self_signed+0x325/0x510 [ 488.764352][T12043] x509_cert_parse+0x60c/0x910 [ 488.764396][T12043] ? ___sys_sendmsg+0x190/0x1e0 [ 488.764447][T12043] ? __sys_sendmsg+0x160/0x210 [ 488.764484][T12043] ? do_syscall_64+0x115/0x840 [ 488.764522][T12043] pkcs7_extract_cert+0xa4/0x380 [ 488.764581][T12043] asn1_ber_decoder+0x12b3/0x2170 [ 488.764667][T12043] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 488.764731][T12043] ? kasan_save_track+0x14/0x30 [ 488.764779][T12043] ? __kasan_kmalloc+0xaa/0xb0 [ 488.764823][T12043] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 488.764865][T12043] ? pkcs7_parse_message+0x15f/0x870 [ 488.764907][T12043] pkcs7_parse_message+0x289/0x870 [ 488.764949][T12043] verify_pkcs7_signature+0x30/0xa0 [ 488.764976][T12043] valid_regdb+0x211/0x590 [ 488.765010][T12043] ? __pfx_valid_regdb+0x10/0x10 [ 488.765038][T12043] ? __kasan_kmalloc+0xaa/0xb0 [ 488.765073][T12043] reg_reload_regdb+0x11a/0x460 [ 488.765111][T12043] ? __pfx_reg_reload_regdb+0x10/0x10 [ 488.765147][T12043] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 488.765170][T12043] ? nl80211_pre_doit+0x19a/0xae0 [ 488.765198][T12043] genl_family_rcv_msg_doit+0x214/0x300 [ 488.765227][T12043] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 488.765253][T12043] ? genl_get_cmd+0x3e7/0x760 [ 488.765302][T12043] ? bpf_lsm_capable+0x9/0x10 [ 488.765326][T12043] ? security_capable+0x80/0x260 [ 488.765370][T12043] genl_rcv_msg+0x560/0x800 [ 488.765399][T12043] ? __pfx_genl_rcv_msg+0x10/0x10 [ 488.765424][T12043] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 488.765447][T12043] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 488.765479][T12043] ? __pfx_nl80211_post_doit+0x10/0x10 [ 488.765515][T12043] netlink_rcv_skb+0x159/0x420 [ 488.765553][T12043] ? __pfx_genl_rcv_msg+0x10/0x10 [ 488.765580][T12043] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 488.765630][T12043] ? netlink_deliver_tap+0x1ae/0xcc0 [ 488.765670][T12043] genl_rcv+0x28/0x40 [ 488.765691][T12043] netlink_unicast+0x585/0x850 [ 488.765733][T12043] ? __pfx_netlink_unicast+0x10/0x10 [ 488.765786][T12043] netlink_sendmsg+0x8b0/0xda0 [ 488.765829][T12043] ? __pfx_netlink_sendmsg+0x10/0x10 [ 488.765872][T12043] ? apparmor_socket_sendmsg+0x15b/0x270 [ 488.765917][T12043] ____sys_sendmsg+0xa4d/0xbe0 [ 488.765952][T12043] ? __pfx_netlink_sendmsg+0x10/0x10 [ 488.765992][T12043] ? __pfx_____sys_sendmsg+0x10/0x10 [ 488.766035][T12043] ? plist_check_list+0x1b8/0x280 [ 488.766067][T12043] ? plist_del+0x308/0x510 [ 488.766101][T12043] ___sys_sendmsg+0x190/0x1e0 [ 488.766141][T12043] ? __pfx____sys_sendmsg+0x10/0x10 [ 488.766177][T12043] ? __lock_acquire+0x49f/0x1a40 [ 488.766214][T12043] ? futex_wake+0x220/0x5e0 [ 488.766276][T12043] __sys_sendmsg+0x160/0x210 [ 488.766305][T12043] ? __pfx___sys_sendmsg+0x10/0x10 [ 488.766350][T12043] do_syscall_64+0x115/0x840 [ 488.766372][T12043] ? clear_bhb_loop+0x40/0x90 [ 488.766402][T12043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.766427][T12043] RIP: 0033:0x7f68cff9de59 [ 488.766449][T12043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 488.766475][T12043] RSP: 002b:00007f68d0f07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 488.766500][T12043] RAX: ffffffffffffffda RBX: 00007f68d0225fa0 RCX: 00007f68cff9de59 [ 488.766517][T12043] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000005 [ 488.766532][T12043] RBP: 00007f68d0033e6f R08: 0000000000000000 R09: 0000000000000000 [ 488.766548][T12043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 488.766563][T12043] R13: 00007f68d0226038 R14: 00007f68d0225fa0 R15: 00007ffe4adb20f8 [ 488.766595][T12043] [ 489.899656][T12064] FAULT_INJECTION: forcing a failure. [ 489.899656][T12064] name failslab, interval 1, probability 0, space 0, times 0 [ 489.928320][T12064] CPU: 1 UID: 0 PID: 12064 Comm: syz.1.1338 Not tainted syzkaller #0 PREEMPT(full) [ 489.928371][T12064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 489.928395][T12064] Call Trace: [ 489.928407][T12064] [ 489.928421][T12064] dump_stack_lvl+0x100/0x190 [ 489.928467][T12064] should_fail_ex.cold+0x5/0xa [ 489.928507][T12064] should_failslab+0xc2/0x120 [ 489.928554][T12064] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 489.928596][T12064] ? percpu_ref_put_many.constprop.0+0xc4/0x2a0 [ 489.928666][T12064] ? zswap_store+0xc6d/0x2e70 [ 489.928727][T12064] zswap_store+0xc6d/0x2e70 [ 489.928788][T12064] ? __lock_acquire+0x49f/0x1a40 [ 489.928850][T12064] ? __pfx_zswap_store+0x10/0x10 [ 489.928909][T12064] ? do_raw_spin_lock+0x128/0x260 [ 489.928945][T12064] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 489.928979][T12064] ? find_held_lock+0x2b/0x80 [ 489.929018][T12064] ? swap_writeout+0xdd8/0x1b20 [ 489.929070][T12064] ? swap_writeout+0xdd8/0x1b20 [ 489.929133][T12064] swap_writeout+0xde0/0x1b20 [ 489.929196][T12064] ? _raw_spin_unlock_irq+0x23/0x50 [ 489.929251][T12064] shmem_writeout+0xf14/0x1a90 [ 489.929315][T12064] ? __pfx_shmem_writeout+0x10/0x10 [ 489.929374][T12064] ? inode_to_bdi+0x9e/0x160 [ 489.929413][T12064] ? folio_clear_dirty_for_io+0x178/0x960 [ 489.929458][T12064] shrink_folio_list+0x3bbd/0x60a0 [ 489.929528][T12064] ? __pfx_shrink_folio_list+0x10/0x10 [ 489.929576][T12064] ? post_alloc_hook+0xed/0x120 [ 489.929641][T12064] ? get_page_from_freelist+0xf48/0x3530 [ 489.929735][T12064] ? __lock_acquire+0x49f/0x1a40 [ 489.929784][T12064] ? __css_rstat_updated+0x1ce/0x5a0 [ 489.929836][T12064] ? __pfx___css_rstat_updated+0x10/0x10 [ 489.929891][T12064] reclaim_folio_list+0xdc/0x5d0 [ 489.929946][T12064] ? __pfx_reclaim_folio_list+0x10/0x10 [ 489.929997][T12064] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 489.930046][T12064] ? lru_gen_update_size+0x431/0xe20 [ 489.930104][T12064] ? lru_gen_del_folio+0x382/0x5f0 [ 489.930155][T12064] reclaim_pages+0x428/0x5e0 [ 489.930212][T12064] ? __pfx_reclaim_pages+0x10/0x10 [ 489.930262][T12064] ? find_held_lock+0x2b/0x80 [ 489.930304][T12064] ? madvise_cold_or_pageout_pte_range+0xb8e/0x2690 [ 489.930372][T12064] madvise_cold_or_pageout_pte_range+0x15a1/0x2690 [ 489.930440][T12064] ? rcu_read_unlock+0x17/0x60 [ 489.930489][T12064] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 489.930544][T12064] ? __mod_zone_page_state+0xe2/0x190 [ 489.930609][T12064] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 489.930673][T12064] walk_pgd_range+0xc1a/0x1dd0 [ 489.930718][T12064] ? find_held_lock+0x2b/0x80 [ 489.930774][T12064] ? __pfx_walk_pgd_range+0x10/0x10 [ 489.930814][T12064] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 489.930877][T12064] __walk_page_range+0x171/0x850 [ 489.930935][T12064] walk_page_range_vma_unsafe+0x209/0x8f0 [ 489.930978][T12064] ? __lock_acquire+0x49f/0x1a40 [ 489.931029][T12064] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 489.931078][T12064] ? find_held_lock+0x2b/0x80 [ 489.931117][T12064] ? mlock_drain_local+0x254/0x4e0 [ 489.931150][T12064] ? mlock_drain_local+0x254/0x4e0 [ 489.931191][T12064] walk_page_range_vma+0x63/0x90 [ 489.931231][T12064] madvise_pageout+0x29e/0x5b0 [ 489.931275][T12064] ? __pfx_madvise_pageout+0x10/0x10 [ 489.931319][T12064] ? rcu_is_watching+0x12/0xc0 [ 489.931374][T12064] ? mtree_range_walk+0x72b/0xb70 [ 489.931435][T12064] madvise_vma_behavior+0x452/0x2240 [ 489.931491][T12064] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 489.931554][T12064] ? find_vma_prev+0xd8/0x150 [ 489.931599][T12064] ? __pfx_find_vma_prev+0x10/0x10 [ 489.931662][T12064] ? __futex_wait+0x256/0x300 [ 489.931716][T12064] madvise_walk_vmas+0x2fe/0xa90 [ 489.931774][T12064] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 489.931835][T12064] madvise_do_behavior+0x1ea/0x510 [ 489.931888][T12064] ? __pfx_madvise_do_behavior+0x10/0x10 [ 489.931941][T12064] ? down_read+0x13b/0x4c0 [ 489.931974][T12064] ? __pfx_futex_wait+0x10/0x10 [ 489.932034][T12064] do_madvise+0x238/0x290 [ 489.932085][T12064] ? __pfx_do_madvise+0x10/0x10 [ 489.932133][T12064] ? do_futex+0x190/0x440 [ 489.932175][T12064] ? find_held_lock+0x2b/0x80 [ 489.932213][T12064] ? __fget_files+0x215/0x3d0 [ 489.932291][T12064] __x64_sys_madvise+0xa9/0x110 [ 489.932341][T12064] ? lockdep_hardirqs_on+0x78/0x100 [ 489.932398][T12064] do_syscall_64+0x115/0x840 [ 489.932429][T12064] ? clear_bhb_loop+0x40/0x90 [ 489.932473][T12064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.932510][T12064] RIP: 0033:0x7f68cff9de59 [ 489.932541][T12064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 489.932576][T12064] RSP: 002b:00007f68d0ec5028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 489.932611][T12064] RAX: ffffffffffffffda RBX: 00007f68d0226180 RCX: 00007f68cff9de59 [ 489.932644][T12064] RDX: 0000000000000015 RSI: 0000000000000081 RDI: 0000000000000000 [ 489.932665][T12064] RBP: 00007f68d0033e6f R08: 0000000000000000 R09: 0000000000000000 [ 489.932688][T12064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 489.932710][T12064] R13: 00007f68d0226218 R14: 00007f68d0226180 R15: 00007ffe4adb20f8 [ 489.932754][T12064] [ 490.555849][T12061] FAULT_INJECTION: forcing a failure. [ 490.555849][T12061] name fail_futex, interval 1, probability 0, space 0, times 0 [ 490.605225][T12061] CPU: 0 UID: 0 PID: 12061 Comm: syz.3.1336 Not tainted syzkaller #0 PREEMPT(full) [ 490.605276][T12061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 490.605298][T12061] Call Trace: [ 490.605318][T12061] [ 490.605333][T12061] dump_stack_lvl+0x100/0x190 [ 490.605380][T12061] should_fail_ex.cold+0x5/0xa [ 490.605421][T12061] get_futex_key+0x1d2/0x14f0 [ 490.605481][T12061] ? __pfx_get_futex_key+0x10/0x10 [ 490.605540][T12061] ? blk_finish_plug+0x83/0xa0 [ 490.605596][T12061] futex_wake+0xf4/0x5e0 [ 490.605641][T12061] ? __up_read+0x333/0x980 [ 490.605676][T12061] ? __pfx___up_read+0x10/0x10 [ 490.605708][T12061] ? __pfx_futex_wake+0x10/0x10 [ 490.605758][T12061] ? madvise_unlock+0xa9/0x220 [ 490.605811][T12061] do_futex+0x2b2/0x440 [ 490.605848][T12061] ? __pfx_do_futex+0x10/0x10 [ 490.605887][T12061] ? find_held_lock+0x2b/0x80 [ 490.605925][T12061] ? __fget_files+0x215/0x3d0 [ 490.605982][T12061] __x64_sys_futex+0x34f/0x4d0 [ 490.606023][T12061] ? __pfx___x64_sys_futex+0x10/0x10 [ 490.606064][T12061] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 490.606118][T12061] ? syscall_user_dispatch+0x76/0x130 [ 490.606158][T12061] do_syscall_64+0x115/0x840 [ 490.606189][T12061] ? clear_bhb_loop+0x40/0x90 [ 490.606230][T12061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.606267][T12061] RIP: 0033:0x7faf02d9de59 [ 490.606296][T12061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 490.606339][T12061] RSP: 002b:00007faf03c6b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 490.606374][T12061] RAX: ffffffffffffffda RBX: 00007faf03026098 RCX: 00007faf02d9de59 [ 490.606397][T12061] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007faf0302609c [ 490.606420][T12061] RBP: 00007faf03026090 R08: 0000000000000001 R09: 0000000000000000 [ 490.606442][T12061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 490.606464][T12061] R13: 00007faf03026128 R14: 00007ffd02b682f0 R15: 00007ffd02b683d8 [ 490.606509][T12061] [ 491.286703][T12085] netlink: 'syz.0.1347': attribute type 1 has an invalid length. [ 491.307921][T12085] netlink: 33 bytes leftover after parsing attributes in process `syz.0.1347'. [ 491.564890][T12091] netlink: 'syz.0.1348': attribute type 1 has an invalid length. [ 491.599421][T12091] netlink: 33 bytes leftover after parsing attributes in process `syz.0.1348'. [ 491.649953][T12088] FAULT_INJECTION: forcing a failure. [ 491.649953][T12088] name failslab, interval 1, probability 0, space 0, times 0 [ 491.759878][T12088] CPU: 0 UID: 0 PID: 12088 Comm: syz.3.1344 Not tainted syzkaller #0 PREEMPT(full) [ 491.759912][T12088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 491.759928][T12088] Call Trace: [ 491.759937][T12088] [ 491.759947][T12088] dump_stack_lvl+0x100/0x190 [ 491.759979][T12088] should_fail_ex.cold+0x5/0xa [ 491.760007][T12088] should_failslab+0xc2/0x120 [ 491.760041][T12088] kmem_cache_alloc_noprof+0x91/0x6a0 [ 491.760074][T12088] ? d_instantiate+0x8a/0xb0 [ 491.760110][T12088] ? d_instantiate+0x8a/0xb0 [ 491.760136][T12088] ? alloc_empty_file+0x5b/0x1c0 [ 491.760170][T12088] alloc_empty_file+0x5b/0x1c0 [ 491.760199][T12088] alloc_file_pseudo+0x183/0x290 [ 491.760230][T12088] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 491.760267][T12088] ioctx_alloc+0x5d6/0x21a0 [ 491.760300][T12088] ? find_held_lock+0x2b/0x80 [ 491.760330][T12088] ? __pfx_ioctx_alloc+0x10/0x10 [ 491.760369][T12088] __x64_sys_io_setup+0xc9/0x220 [ 491.760396][T12088] do_syscall_64+0x115/0x840 [ 491.760420][T12088] ? clear_bhb_loop+0x40/0x90 [ 491.760459][T12088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.760485][T12088] RIP: 0033:0x7faf02d9de59 [ 491.760505][T12088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 491.760535][T12088] RSP: 002b:00007faf03c4a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 491.760559][T12088] RAX: ffffffffffffffda RBX: 00007faf03026180 RCX: 00007faf02d9de59 [ 491.760576][T12088] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000007ffe [ 491.760591][T12088] RBP: 00007faf02e33e6f R08: 0000000000000000 R09: 0000000000000000 [ 491.760607][T12088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 491.760628][T12088] R13: 00007faf03026218 R14: 00007faf03026180 R15: 00007ffd02b683d8 [ 491.760665][T12088] [ 492.550995][ T5907] Bluetooth: hci0: unexpected event for opcode 0x7c89 [ 493.201304][T12125] FAULT_INJECTION: forcing a failure. [ 493.201304][T12125] name failslab, interval 1, probability 0, space 0, times 0 [ 493.252233][T12125] CPU: 1 UID: 0 PID: 12125 Comm: syz.1.1354 Not tainted syzkaller #0 PREEMPT(full) [ 493.252284][T12125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 493.252305][T12125] Call Trace: [ 493.252317][T12125] [ 493.252330][T12125] dump_stack_lvl+0x100/0x190 [ 493.252375][T12125] should_fail_ex.cold+0x5/0xa [ 493.252414][T12125] should_failslab+0xc2/0x120 [ 493.252459][T12125] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 493.252499][T12125] ? percpu_ref_put_many.constprop.0+0xc4/0x2a0 [ 493.252565][T12125] ? zswap_store+0xc6d/0x2e70 [ 493.252625][T12125] zswap_store+0xc6d/0x2e70 [ 493.252687][T12125] ? __lock_acquire+0x49f/0x1a40 [ 493.252755][T12125] ? __pfx_zswap_store+0x10/0x10 [ 493.252820][T12125] ? do_raw_spin_lock+0x128/0x260 [ 493.252857][T12125] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 493.252892][T12125] ? find_held_lock+0x2b/0x80 [ 493.252931][T12125] ? swap_writeout+0xdd8/0x1b20 [ 493.252984][T12125] ? swap_writeout+0xdd8/0x1b20 [ 493.253049][T12125] swap_writeout+0xde0/0x1b20 [ 493.253106][T12125] ? _raw_spin_unlock_irq+0x23/0x50 [ 493.253160][T12125] shmem_writeout+0xf14/0x1a90 [ 493.253223][T12125] ? __pfx_shmem_writeout+0x10/0x10 [ 493.253282][T12125] ? inode_to_bdi+0x9e/0x160 [ 493.253320][T12125] ? folio_clear_dirty_for_io+0x178/0x960 [ 493.253365][T12125] shrink_folio_list+0x3bbd/0x60a0 [ 493.253433][T12125] ? __pfx_shrink_folio_list+0x10/0x10 [ 493.253481][T12125] ? post_alloc_hook+0xed/0x120 [ 493.253545][T12125] ? get_page_from_freelist+0xf48/0x3530 [ 493.253634][T12125] ? __lock_acquire+0x49f/0x1a40 [ 493.253683][T12125] ? __css_rstat_updated+0x1ce/0x5a0 [ 493.253738][T12125] ? __pfx___css_rstat_updated+0x10/0x10 [ 493.253792][T12125] reclaim_folio_list+0xdc/0x5d0 [ 493.253850][T12125] ? __pfx_reclaim_folio_list+0x10/0x10 [ 493.253899][T12125] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 493.253955][T12125] ? lru_gen_update_size+0x431/0xe20 [ 493.254011][T12125] ? lru_gen_del_folio+0x382/0x5f0 [ 493.254063][T12125] reclaim_pages+0x428/0x5e0 [ 493.254119][T12125] ? __pfx_reclaim_pages+0x10/0x10 [ 493.254166][T12125] ? find_held_lock+0x2b/0x80 [ 493.254207][T12125] ? madvise_cold_or_pageout_pte_range+0xb8e/0x2690 [ 493.254266][T12125] madvise_cold_or_pageout_pte_range+0x15a1/0x2690 [ 493.254338][T12125] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 493.254399][T12125] ? mark_held_locks+0x40/0x70 [ 493.254450][T12125] ? irqentry_exit+0x24d/0xa00 [ 493.254514][T12125] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 493.254573][T12125] walk_pgd_range+0xc1a/0x1dd0 [ 493.254619][T12125] ? find_held_lock+0x2b/0x80 [ 493.254671][T12125] ? __pfx_walk_pgd_range+0x10/0x10 [ 493.254716][T12125] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 493.254783][T12125] __walk_page_range+0x171/0x850 [ 493.254840][T12125] walk_page_range_vma_unsafe+0x209/0x8f0 [ 493.254883][T12125] ? __lock_acquire+0x49f/0x1a40 [ 493.254932][T12125] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 493.254981][T12125] ? find_held_lock+0x2b/0x80 [ 493.255019][T12125] ? mlock_drain_local+0x254/0x4e0 [ 493.255053][T12125] ? mlock_drain_local+0x254/0x4e0 [ 493.255100][T12125] walk_page_range_vma+0x63/0x90 [ 493.255142][T12125] madvise_pageout+0x29e/0x5b0 [ 493.255191][T12125] ? __pfx_madvise_pageout+0x10/0x10 [ 493.255241][T12125] ? rcu_is_watching+0x12/0xc0 [ 493.255297][T12125] ? mtree_range_walk+0x72b/0xb70 [ 493.255356][T12125] madvise_vma_behavior+0x452/0x2240 [ 493.255414][T12125] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 493.255478][T12125] ? find_vma_prev+0xd8/0x150 [ 493.255530][T12125] ? __pfx_find_vma_prev+0x10/0x10 [ 493.255588][T12125] ? __futex_wait+0x256/0x300 [ 493.255642][T12125] madvise_walk_vmas+0x2fe/0xa90 [ 493.255700][T12125] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 493.255761][T12125] madvise_do_behavior+0x1ea/0x510 [ 493.255815][T12125] ? __pfx_madvise_do_behavior+0x10/0x10 [ 493.255867][T12125] ? down_read+0x13b/0x4c0 [ 493.255901][T12125] ? __pfx_futex_wait+0x10/0x10 [ 493.255962][T12125] do_madvise+0x238/0x290 [ 493.256011][T12125] ? __pfx_do_madvise+0x10/0x10 [ 493.256059][T12125] ? do_futex+0x190/0x440 [ 493.256101][T12125] ? find_held_lock+0x2b/0x80 [ 493.256140][T12125] ? __fget_files+0x215/0x3d0 [ 493.256218][T12125] __x64_sys_madvise+0xa9/0x110 [ 493.256267][T12125] ? lockdep_hardirqs_on+0x78/0x100 [ 493.256322][T12125] do_syscall_64+0x115/0x840 [ 493.256352][T12125] ? clear_bhb_loop+0x40/0x90 [ 493.256395][T12125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.256432][T12125] RIP: 0033:0x7f68cff9de59 [ 493.256469][T12125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 493.256513][T12125] RSP: 002b:00007f68d0ec5028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 493.256547][T12125] RAX: ffffffffffffffda RBX: 00007f68d0226180 RCX: 00007f68cff9de59 [ 493.256571][T12125] RDX: 0000000000000015 RSI: 0000000000000081 RDI: 0000000000000000 [ 493.256594][T12125] RBP: 00007f68d0033e6f R08: 0000000000000000 R09: 0000000000000000 [ 493.256615][T12125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 493.256638][T12125] R13: 00007f68d0226218 R14: 00007f68d0226180 R15: 00007ffe4adb20f8 [ 493.256683][T12125] [ 494.917265][ T5907] Bluetooth: hci2: Unexpected cc 0x7c89 with no status [ 497.203840][T12187] FAULT_INJECTION: forcing a failure. [ 497.203840][T12187] name failslab, interval 1, probability 0, space 0, times 0 [ 497.312503][T12187] CPU: 1 UID: 0 PID: 12187 Comm: syz.2.1363 Not tainted syzkaller #0 PREEMPT(full) [ 497.312537][T12187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 497.312553][T12187] Call Trace: [ 497.312562][T12187] [ 497.312571][T12187] dump_stack_lvl+0x100/0x190 [ 497.312610][T12187] should_fail_ex.cold+0x5/0xa [ 497.312639][T12187] should_failslab+0xc2/0x120 [ 497.312673][T12187] kmem_cache_alloc_noprof+0x91/0x6a0 [ 497.312700][T12187] ? d_instantiate+0x8a/0xb0 [ 497.312725][T12187] ? d_instantiate+0x8a/0xb0 [ 497.312749][T12187] ? alloc_empty_file+0x5b/0x1c0 [ 497.312783][T12187] alloc_empty_file+0x5b/0x1c0 [ 497.312812][T12187] alloc_file_pseudo+0x183/0x290 [ 497.312843][T12187] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 497.312880][T12187] ioctx_alloc+0x5d6/0x21a0 [ 497.312918][T12187] ? find_held_lock+0x2b/0x80 [ 497.312948][T12187] ? __pfx_ioctx_alloc+0x10/0x10 [ 497.312985][T12187] __x64_sys_io_setup+0xc9/0x220 [ 497.313012][T12187] do_syscall_64+0x115/0x840 [ 497.313035][T12187] ? clear_bhb_loop+0x40/0x90 [ 497.313065][T12187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.313093][T12187] RIP: 0033:0x7fdf6759de59 [ 497.313121][T12187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 497.313145][T12187] RSP: 002b:00007fdf657f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 497.313169][T12187] RAX: ffffffffffffffda RBX: 00007fdf67826180 RCX: 00007fdf6759de59 [ 497.313185][T12187] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000007ffe [ 497.313200][T12187] RBP: 00007fdf67633e6f R08: 0000000000000000 R09: 0000000000000000 [ 497.313216][T12187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 497.313231][T12187] R13: 00007fdf67826218 R14: 00007fdf67826180 R15: 00007fff655af898 [ 497.313285][T12187] [ 499.748333][T12252] FAULT_INJECTION: forcing a failure. [ 499.748333][T12252] name failslab, interval 1, probability 0, space 0, times 0 [ 499.900537][T12252] CPU: 1 UID: 0 PID: 12252 Comm: syz.3.1381 Not tainted syzkaller #0 PREEMPT(full) [ 499.900583][T12252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 499.900599][T12252] Call Trace: [ 499.900607][T12252] [ 499.900617][T12252] dump_stack_lvl+0x100/0x190 [ 499.900649][T12252] should_fail_ex.cold+0x5/0xa [ 499.900683][T12252] should_failslab+0xc2/0x120 [ 499.900716][T12252] kmem_cache_alloc_noprof+0x91/0x6a0 [ 499.900743][T12252] ? d_instantiate+0x8a/0xb0 [ 499.900768][T12252] ? d_instantiate+0x8a/0xb0 [ 499.900793][T12252] ? alloc_empty_file+0x5b/0x1c0 [ 499.900827][T12252] alloc_empty_file+0x5b/0x1c0 [ 499.900857][T12252] alloc_file_pseudo+0x183/0x290 [ 499.900888][T12252] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 499.900925][T12252] ioctx_alloc+0x5d6/0x21a0 [ 499.900966][T12252] ? find_held_lock+0x2b/0x80 [ 499.900997][T12252] ? __pfx_ioctx_alloc+0x10/0x10 [ 499.901029][T12252] __x64_sys_io_setup+0xc9/0x220 [ 499.901056][T12252] do_syscall_64+0x115/0x840 [ 499.901082][T12252] ? clear_bhb_loop+0x40/0x90 [ 499.901112][T12252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.901137][T12252] RIP: 0033:0x7faf02d9de59 [ 499.901158][T12252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 499.901183][T12252] RSP: 002b:00007faf03c4a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 499.901207][T12252] RAX: ffffffffffffffda RBX: 00007faf03026180 RCX: 00007faf02d9de59 [ 499.901224][T12252] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000007ffe [ 499.901239][T12252] RBP: 00007faf02e33e6f R08: 0000000000000000 R09: 0000000000000000 [ 499.901255][T12252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 499.901270][T12252] R13: 00007faf03026218 R14: 00007faf03026180 R15: 00007ffd02b683d8 [ 499.901301][T12252] [ 500.475681][T12271] FAULT_INJECTION: forcing a failure. [ 500.475681][T12271] name failslab, interval 1, probability 0, space 0, times 0 [ 500.544633][T12271] CPU: 1 UID: 0 PID: 12271 Comm: syz.1.1387 Not tainted syzkaller #0 PREEMPT(full) [ 500.544673][T12271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 500.544689][T12271] Call Trace: [ 500.544698][T12271] [ 500.544708][T12271] dump_stack_lvl+0x100/0x190 [ 500.544740][T12271] should_fail_ex.cold+0x5/0xa [ 500.544768][T12271] should_failslab+0xc2/0x120 [ 500.544801][T12271] __kmalloc_noprof+0xfc/0x820 [ 500.544830][T12271] ? __memcg_list_lru_alloc+0x418/0x680 [ 500.544875][T12271] __memcg_list_lru_alloc+0x418/0x680 [ 500.544915][T12271] ? xa_load+0x149/0x2c0 [ 500.544948][T12271] ? __pfx___memcg_list_lru_alloc+0x10/0x10 [ 500.544994][T12271] ? rcu_read_unlock+0x17/0x60 [ 500.545042][T12271] memcg_list_lru_alloc+0xd3/0x100 [ 500.545069][T12271] __memcg_slab_post_alloc_hook+0x28b/0x1160 [ 500.545120][T12271] ? kasan_save_track+0x14/0x30 [ 500.545151][T12271] kmem_cache_alloc_lru_noprof+0x583/0x6a0 [ 500.545179][T12271] ? lockdep_hardirqs_on+0x78/0x100 [ 500.545218][T12271] ? __d_alloc+0x35/0xa50 [ 500.545247][T12271] __d_alloc+0x35/0xa50 [ 500.545268][T12271] ? inode_set_ctime_current+0x283/0x850 [ 500.545299][T12271] d_alloc_pseudo+0x1c/0xc0 [ 500.545331][T12271] alloc_file_pseudo+0x118/0x290 [ 500.545362][T12271] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 500.545400][T12271] ioctx_alloc+0x5d6/0x21a0 [ 500.545433][T12271] ? find_held_lock+0x2b/0x80 [ 500.545462][T12271] ? __pfx_ioctx_alloc+0x10/0x10 [ 500.545503][T12271] __x64_sys_io_setup+0xc9/0x220 [ 500.545531][T12271] do_syscall_64+0x115/0x840 [ 500.545553][T12271] ? clear_bhb_loop+0x40/0x90 [ 500.545584][T12271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.545610][T12271] RIP: 0033:0x7f68cff9de59 [ 500.545631][T12271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 500.545655][T12271] RSP: 002b:00007f68d0ec5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 500.545679][T12271] RAX: ffffffffffffffda RBX: 00007f68d0226180 RCX: 00007f68cff9de59 [ 500.545696][T12271] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000007ffe [ 500.545711][T12271] RBP: 00007f68d0033e6f R08: 0000000000000000 R09: 0000000000000000 [ 500.545727][T12271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 500.545742][T12271] R13: 00007f68d0226218 R14: 00007f68d0226180 R15: 00007ffe4adb20f8 [ 500.545785][T12271] [ 501.406119][T12273] Process accounting resumed [ 501.769419][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.775965][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.941060][T12326] FAULT_INJECTION: forcing a failure. [ 502.941060][T12326] name failslab, interval 1, probability 0, space 0, times 0 [ 503.008100][T12326] CPU: 1 UID: 0 PID: 12326 Comm: syz.1.1398 Not tainted syzkaller #0 PREEMPT(full) [ 503.008148][T12326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 503.008178][T12326] Call Trace: [ 503.008190][T12326] [ 503.008203][T12326] dump_stack_lvl+0x100/0x190 [ 503.008249][T12326] should_fail_ex.cold+0x5/0xa [ 503.008290][T12326] should_failslab+0xc2/0x120 [ 503.008335][T12326] __kmalloc_noprof+0xfc/0x820 [ 503.008377][T12326] ? __memcg_list_lru_alloc+0x418/0x680 [ 503.008442][T12326] __memcg_list_lru_alloc+0x418/0x680 [ 503.008499][T12326] ? xa_load+0x149/0x2c0 [ 503.008546][T12326] ? __pfx___memcg_list_lru_alloc+0x10/0x10 [ 503.008614][T12326] ? rcu_read_unlock+0x17/0x60 [ 503.008672][T12326] memcg_list_lru_alloc+0xd3/0x100 [ 503.008716][T12326] __memcg_slab_post_alloc_hook+0x28b/0x1160 [ 503.008775][T12326] ? kasan_save_track+0x14/0x30 [ 503.008824][T12326] kmem_cache_alloc_lru_noprof+0x583/0x6a0 [ 503.008858][T12326] ? lockdep_hardirqs_on+0x78/0x100 [ 503.008907][T12326] ? __d_alloc+0x35/0xa50 [ 503.008942][T12326] __d_alloc+0x35/0xa50 [ 503.008968][T12326] ? inode_set_ctime_current+0x283/0x850 [ 503.009002][T12326] d_alloc_pseudo+0x1c/0xc0 [ 503.009040][T12326] alloc_file_pseudo+0x118/0x290 [ 503.009080][T12326] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 503.009126][T12326] ioctx_alloc+0x5d6/0x21a0 [ 503.009175][T12326] ? find_held_lock+0x2b/0x80 [ 503.009217][T12326] ? __pfx_ioctx_alloc+0x10/0x10 [ 503.009257][T12326] __x64_sys_io_setup+0xc9/0x220 [ 503.009289][T12326] do_syscall_64+0x115/0x840 [ 503.009316][T12326] ? clear_bhb_loop+0x40/0x90 [ 503.009352][T12326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.009383][T12326] RIP: 0033:0x7f68cff9de59 [ 503.009409][T12326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 503.009438][T12326] RSP: 002b:00007f68d0ec5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 503.009467][T12326] RAX: ffffffffffffffda RBX: 00007f68d0226180 RCX: 00007f68cff9de59 [ 503.009488][T12326] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000007ffe [ 503.009506][T12326] RBP: 00007f68d0033e6f R08: 0000000000000000 R09: 0000000000000000 [ 503.009525][T12326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 503.009544][T12326] R13: 00007f68d0226218 R14: 00007f68d0226180 R15: 00007ffe4adb20f8 [ 503.009584][T12326] [ 503.326732][T12329] FAULT_INJECTION: forcing a failure. [ 503.326732][T12329] name failslab, interval 1, probability 0, space 0, times 0 [ 503.339496][T12329] CPU: 1 UID: 0 PID: 12329 Comm: syz.3.1399 Not tainted syzkaller #0 PREEMPT(full) [ 503.339542][T12329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 503.339563][T12329] Call Trace: [ 503.339576][T12329] [ 503.339589][T12329] dump_stack_lvl+0x100/0x190 [ 503.339635][T12329] should_fail_ex.cold+0x5/0xa [ 503.339673][T12329] should_failslab+0xc2/0x120 [ 503.339720][T12329] __kmalloc_cache_noprof+0x91/0x6c0 [ 503.339777][T12329] ? do_raw_spin_lock+0x128/0x260 [ 503.339812][T12329] ? alloc_fdtable+0xbd/0x2d0 [ 503.339870][T12329] alloc_fdtable+0xbd/0x2d0 [ 503.339921][T12329] dup_fd+0x995/0xd10 [ 503.339979][T12329] ? apparmor_task_alloc+0x2c1/0x3b0 [ 503.340039][T12329] copy_process+0x2c94/0x8030 [ 503.340102][T12329] ? __pfx_copy_process+0x10/0x10 [ 503.340143][T12329] ? futex_wake+0x4ea/0x5e0 [ 503.340200][T12329] kernel_clone+0x176/0x9d0 [ 503.340244][T12329] ? __pfx_kernel_clone+0x10/0x10 [ 503.340325][T12329] __do_sys_clone+0xd9/0x120 [ 503.340362][T12329] ? __pfx___do_sys_clone+0x10/0x10 [ 503.340400][T12329] ? do_raw_spin_lock+0x128/0x260 [ 503.340464][T12329] do_syscall_64+0x115/0x840 [ 503.340505][T12329] ? clear_bhb_loop+0x40/0x90 [ 503.340547][T12329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.340581][T12329] RIP: 0033:0x7faf02d9de59 [ 503.340609][T12329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 503.340643][T12329] RSP: 002b:00007faf03c49fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 503.340681][T12329] RAX: ffffffffffffffda RBX: 00007faf03026180 RCX: 00007faf02d9de59 [ 503.340707][T12329] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 503.340730][T12329] RBP: 00007faf02e33e6f R08: 0000000000000000 R09: 0000000000000000 [ 503.340752][T12329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 503.340772][T12329] R13: 00007faf03026218 R14: 00007faf03026180 R15: 00007ffd02b683d8 [ 503.340817][T12329] [ 503.711418][T12334] FAULT_INJECTION: forcing a failure. [ 503.711418][T12334] name failslab, interval 1, probability 0, space 0, times 0 [ 503.748628][T12334] CPU: 1 UID: 0 PID: 12334 Comm: syz.2.1402 Not tainted syzkaller #0 PREEMPT(full) [ 503.748680][T12334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 503.748702][T12334] Call Trace: [ 503.748724][T12334] [ 503.748738][T12334] dump_stack_lvl+0x100/0x190 [ 503.748785][T12334] should_fail_ex.cold+0x5/0xa [ 503.748824][T12334] should_failslab+0xc2/0x120 [ 503.748870][T12334] __kmalloc_cache_noprof+0x91/0x6c0 [ 503.748927][T12334] ? mpi_alloc+0x46/0x230 [ 503.748974][T12334] mpi_alloc+0x46/0x230 [ 503.749014][T12334] rsa_check_payload+0x3b/0xc0 [ 503.749050][T12334] rsa_enc+0x198/0x3b0 [ 503.749087][T12334] ? __pfx_rsa_enc+0x10/0x10 [ 503.749121][T12334] ? __virt_addr_valid+0x239/0x430 [ 503.749156][T12334] ? sg_init_one+0xf5/0x1b0 [ 503.749196][T12334] rsassa_pkcs1_verify+0x4eb/0xc20 [ 503.749251][T12334] ? __pfx_rsassa_pkcs1_verify+0x10/0x10 [ 503.749315][T12334] ? rsa_max_size+0xd/0x70 [ 503.749347][T12334] ? rsassa_pkcs1_set_pub_key+0x17d/0x1f0 [ 503.749394][T12334] public_key_verify_signature+0x5ee/0x910 [ 503.749448][T12334] ? __pfx_public_key_verify_signature+0x10/0x10 [ 503.749514][T12334] ? asymmetric_key_generate_id+0x7e/0x180 [ 503.749564][T12334] x509_check_for_self_signed+0x325/0x510 [ 503.749619][T12334] x509_cert_parse+0x60c/0x910 [ 503.749661][T12334] ? ___sys_sendmsg+0x190/0x1e0 [ 503.749711][T12334] ? __sys_sendmsg+0x160/0x210 [ 503.749756][T12334] ? do_syscall_64+0x115/0x840 [ 503.749792][T12334] pkcs7_extract_cert+0xa4/0x380 [ 503.749849][T12334] asn1_ber_decoder+0x12b3/0x2170 [ 503.749922][T12334] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 503.749982][T12334] ? kasan_save_track+0x14/0x30 [ 503.750021][T12334] ? __kasan_kmalloc+0xaa/0xb0 [ 503.750060][T12334] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 503.750116][T12334] ? pkcs7_parse_message+0x15f/0x870 [ 503.750174][T12334] pkcs7_parse_message+0x289/0x870 [ 503.750233][T12334] verify_pkcs7_signature+0x30/0xa0 [ 503.750274][T12334] valid_regdb+0x211/0x590 [ 503.750321][T12334] ? __pfx_valid_regdb+0x10/0x10 [ 503.750359][T12334] ? __kasan_kmalloc+0xaa/0xb0 [ 503.750407][T12334] reg_reload_regdb+0x11a/0x460 [ 503.750454][T12334] ? __pfx_reg_reload_regdb+0x10/0x10 [ 503.750504][T12334] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 503.750537][T12334] ? nl80211_pre_doit+0x19a/0xae0 [ 503.750575][T12334] genl_family_rcv_msg_doit+0x214/0x300 [ 503.750617][T12334] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 503.750652][T12334] ? genl_get_cmd+0x3e7/0x760 [ 503.750722][T12334] ? bpf_lsm_capable+0x9/0x10 [ 503.750757][T12334] ? security_capable+0x80/0x260 [ 503.750818][T12334] genl_rcv_msg+0x560/0x800 [ 503.750857][T12334] ? __pfx_genl_rcv_msg+0x10/0x10 [ 503.750893][T12334] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 503.750925][T12334] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 503.750970][T12334] ? __pfx_nl80211_post_doit+0x10/0x10 [ 503.751019][T12334] netlink_rcv_skb+0x159/0x420 [ 503.751077][T12334] ? __pfx_genl_rcv_msg+0x10/0x10 [ 503.751115][T12334] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 503.751185][T12334] ? netlink_deliver_tap+0x1ae/0xcc0 [ 503.751242][T12334] genl_rcv+0x28/0x40 [ 503.751271][T12334] netlink_unicast+0x585/0x850 [ 503.751330][T12334] ? __pfx_netlink_unicast+0x10/0x10 [ 503.751393][T12334] netlink_sendmsg+0x8b0/0xda0 [ 503.751451][T12334] ? __pfx_netlink_sendmsg+0x10/0x10 [ 503.751508][T12334] ? apparmor_socket_sendmsg+0x15b/0x270 [ 503.751570][T12334] ____sys_sendmsg+0xa4d/0xbe0 [ 503.751619][T12334] ? __pfx_netlink_sendmsg+0x10/0x10 [ 503.751675][T12334] ? __pfx_____sys_sendmsg+0x10/0x10 [ 503.751753][T12334] ___sys_sendmsg+0x190/0x1e0 [ 503.751808][T12334] ? __pfx____sys_sendmsg+0x10/0x10 [ 503.751859][T12334] ? __lock_acquire+0x49f/0x1a40 [ 503.751959][T12334] __sys_sendmsg+0x160/0x210 [ 503.752000][T12334] ? __pfx___sys_sendmsg+0x10/0x10 [ 503.752063][T12334] do_syscall_64+0x115/0x840 [ 503.752094][T12334] ? clear_bhb_loop+0x40/0x90 [ 503.752137][T12334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.752174][T12334] RIP: 0033:0x7fdf6759de59 [ 503.752205][T12334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 503.752240][T12334] RSP: 002b:00007fdf683b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 503.752276][T12334] RAX: ffffffffffffffda RBX: 00007fdf67825fa0 RCX: 00007fdf6759de59 [ 503.752301][T12334] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000005 [ 503.752323][T12334] RBP: 00007fdf67633e6f R08: 0000000000000000 R09: 0000000000000000 [ 503.752344][T12334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 503.752365][T12334] R13: 00007fdf67826038 R14: 00007fdf67825fa0 R15: 00007fff655af898 [ 503.752410][T12334] [ 504.534638][ T5907] Bluetooth: hci0: unexpected event 0x02 length: 1021 > 260 [ 504.549906][T12340] netlink: 146 bytes leftover after parsing attributes in process `syz.2.1406'. [ 504.935086][ T5907] Bluetooth: hci2: unexpected event for opcode 0x7c89 [ 505.000959][T12358] netlink: 'syz.0.1410': attribute type 1 has an invalid length. [ 505.050467][T12358] netlink: 33 bytes leftover after parsing attributes in process `syz.0.1410'. [ 505.206845][T12366] random: crng reseeded on system resumption [ 506.163709][T12385] FAULT_INJECTION: forcing a failure. [ 506.163709][T12385] name failslab, interval 1, probability 0, space 0, times 0 [ 506.186810][T12385] CPU: 0 UID: 0 PID: 12385 Comm: syz.3.1414 Not tainted syzkaller #0 PREEMPT(full) [ 506.186844][T12385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 506.186860][T12385] Call Trace: [ 506.186869][T12385] [ 506.186878][T12385] dump_stack_lvl+0x100/0x190 [ 506.186910][T12385] should_fail_ex.cold+0x5/0xa [ 506.186938][T12385] should_failslab+0xc2/0x120 [ 506.186977][T12385] kmem_cache_alloc_noprof+0x91/0x6a0 [ 506.187004][T12385] ? d_instantiate+0x8a/0xb0 [ 506.187030][T12385] ? d_instantiate+0x8a/0xb0 [ 506.187055][T12385] ? alloc_empty_file+0x5b/0x1c0 [ 506.187088][T12385] alloc_empty_file+0x5b/0x1c0 [ 506.187117][T12385] alloc_file_pseudo+0x183/0x290 [ 506.187148][T12385] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 506.187186][T12385] ioctx_alloc+0x5d6/0x21a0 [ 506.187220][T12385] ? find_held_lock+0x2b/0x80 [ 506.187249][T12385] ? __pfx_ioctx_alloc+0x10/0x10 [ 506.187281][T12385] __x64_sys_io_setup+0xc9/0x220 [ 506.187307][T12385] do_syscall_64+0x115/0x840 [ 506.187332][T12385] ? clear_bhb_loop+0x40/0x90 [ 506.187362][T12385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.187388][T12385] RIP: 0033:0x7faf02d9de59 [ 506.187408][T12385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 506.187433][T12385] RSP: 002b:00007faf03c4a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 506.187457][T12385] RAX: ffffffffffffffda RBX: 00007faf03026180 RCX: 00007faf02d9de59 [ 506.187473][T12385] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000007ffe [ 506.187489][T12385] RBP: 00007faf02e33e6f R08: 0000000000000000 R09: 0000000000000000 [ 506.187504][T12385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 506.187554][T12385] R13: 00007faf03026218 R14: 00007faf03026180 R15: 00007ffd02b683d8 [ 506.187597][T12385] [ 507.374185][T12414] netlink: 'syz.3.1422': attribute type 1 has an invalid length. [ 507.385956][T12414] netlink: 33 bytes leftover after parsing attributes in process `syz.3.1422'. [ 507.888782][T12424] zswap: compressor not available [ 508.614037][T12435] FAULT_INJECTION: forcing a failure. [ 508.614037][T12435] name failslab, interval 1, probability 0, space 0, times 0 [ 508.669830][T12435] CPU: 1 UID: 0 PID: 12435 Comm: syz.1.1424 Not tainted syzkaller #0 PREEMPT(full) [ 508.669893][T12435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 508.669916][T12435] Call Trace: [ 508.669928][T12435] [ 508.669942][T12435] dump_stack_lvl+0x100/0x190 [ 508.669990][T12435] should_fail_ex.cold+0x5/0xa [ 508.670029][T12435] should_failslab+0xc2/0x120 [ 508.670072][T12435] __kmalloc_noprof+0xfc/0x820 [ 508.670113][T12435] ? query_regdb+0x262/0xcb0 [ 508.670165][T12435] query_regdb+0x262/0xcb0 [ 508.670226][T12435] reg_query_database+0x163/0x510 [ 508.670272][T12435] ? __pfx_reg_query_database+0x10/0x10 [ 508.670324][T12435] ? kasan_save_track+0x14/0x30 [ 508.670364][T12435] ? __kasan_kmalloc+0xaa/0xb0 [ 508.670405][T12435] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 508.670463][T12435] reg_process_hint+0x292/0xe30 [ 508.670517][T12435] reg_reload_regdb+0x389/0x460 [ 508.670566][T12435] ? __pfx_reg_reload_regdb+0x10/0x10 [ 508.670616][T12435] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 508.670649][T12435] ? nl80211_pre_doit+0x19a/0xae0 [ 508.670690][T12435] genl_family_rcv_msg_doit+0x214/0x300 [ 508.670742][T12435] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 508.670781][T12435] ? genl_get_cmd+0x3e7/0x760 [ 508.670866][T12435] ? bpf_lsm_capable+0x9/0x10 [ 508.670901][T12435] ? security_capable+0x80/0x260 [ 508.670964][T12435] genl_rcv_msg+0x560/0x800 [ 508.671004][T12435] ? __pfx_genl_rcv_msg+0x10/0x10 [ 508.671040][T12435] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 508.671074][T12435] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 508.671119][T12435] ? __pfx_nl80211_post_doit+0x10/0x10 [ 508.671170][T12435] netlink_rcv_skb+0x159/0x420 [ 508.671222][T12435] ? __pfx_genl_rcv_msg+0x10/0x10 [ 508.671260][T12435] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 508.671331][T12435] ? netlink_deliver_tap+0x1ae/0xcc0 [ 508.671388][T12435] genl_rcv+0x28/0x40 [ 508.671418][T12435] netlink_unicast+0x585/0x850 [ 508.671476][T12435] ? __pfx_netlink_unicast+0x10/0x10 [ 508.671543][T12435] netlink_sendmsg+0x8b0/0xda0 [ 508.671604][T12435] ? __pfx_netlink_sendmsg+0x10/0x10 [ 508.671664][T12435] ? apparmor_socket_sendmsg+0x15b/0x270 [ 508.671735][T12435] ____sys_sendmsg+0xa4d/0xbe0 [ 508.671786][T12435] ? __pfx_netlink_sendmsg+0x10/0x10 [ 508.671844][T12435] ? __pfx_____sys_sendmsg+0x10/0x10 [ 508.671916][T12435] ___sys_sendmsg+0x190/0x1e0 [ 508.671973][T12435] ? __pfx____sys_sendmsg+0x10/0x10 [ 508.672023][T12435] ? __lock_acquire+0x49f/0x1a40 [ 508.672123][T12435] __sys_sendmsg+0x160/0x210 [ 508.672162][T12435] ? __pfx___sys_sendmsg+0x10/0x10 [ 508.672224][T12435] do_syscall_64+0x115/0x840 [ 508.672255][T12435] ? clear_bhb_loop+0x40/0x90 [ 508.672304][T12435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.672339][T12435] RIP: 0033:0x7f68cff9de59 [ 508.672369][T12435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 508.672404][T12435] RSP: 002b:00007f68d0f07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 508.672436][T12435] RAX: ffffffffffffffda RBX: 00007f68d0225fa0 RCX: 00007f68cff9de59 [ 508.672459][T12435] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000005 [ 508.672480][T12435] RBP: 00007f68d0033e6f R08: 0000000000000000 R09: 0000000000000000 [ 508.672502][T12435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 508.672523][T12435] R13: 00007f68d0226038 R14: 00007f68d0225fa0 R15: 00007ffe4adb20f8 [ 508.672566][T12435] [ 509.228695][T12443] FAULT_INJECTION: forcing a failure. [ 509.228695][T12443] name failslab, interval 1, probability 0, space 0, times 0 [ 509.241537][T12443] CPU: 1 UID: 0 PID: 12443 Comm: syz.3.1425 Not tainted syzkaller #0 PREEMPT(full) [ 509.241584][T12443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 509.241606][T12443] Call Trace: [ 509.241618][T12443] [ 509.241632][T12443] dump_stack_lvl+0x100/0x190 [ 509.241678][T12443] should_fail_ex.cold+0x5/0xa [ 509.241759][T12443] should_failslab+0xc2/0x120 [ 509.241807][T12443] __kmalloc_cache_noprof+0x91/0x6c0 [ 509.241866][T12443] ? proc_self_get_link+0x189/0x1f0 [ 509.241923][T12443] proc_self_get_link+0x189/0x1f0 [ 509.241974][T12443] pick_link+0xac2/0x13c0 [ 509.242020][T12443] ? __pfx_proc_self_get_link+0x10/0x10 [ 509.242075][T12443] step_into_slowpath+0x9ba/0xf90 [ 509.242132][T12443] ? __pfx_step_into_slowpath+0x10/0x10 [ 509.242186][T12443] ? lookup_fast+0x2da/0x600 [ 509.242229][T12443] ? inode_permission+0x374/0x620 [ 509.242274][T12443] link_path_walk+0xf28/0x1cc0 [ 509.242354][T12443] path_openat+0x1c9/0x4280 [ 509.242406][T12443] ? __kasan_slab_alloc+0x89/0x90 [ 509.242449][T12443] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 509.242489][T12443] ? do_getname+0x35/0x390 [ 509.242527][T12443] ? __x64_sys_openat+0x12d/0x210 [ 509.242583][T12443] ? __pfx_path_openat+0x10/0x10 [ 509.242649][T12443] do_file_open+0x20e/0x430 [ 509.242715][T12443] ? __pfx_do_file_open+0x10/0x10 [ 509.242803][T12443] ? alloc_fd+0x471/0x7a0 [ 509.242860][T12443] ? do_getname+0x191/0x390 [ 509.242903][T12443] do_sys_openat2+0x10f/0x1e0 [ 509.242947][T12443] ? __pfx_do_sys_openat2+0x10/0x10 [ 509.242991][T12443] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 509.243063][T12443] __x64_sys_openat+0x12d/0x210 [ 509.243108][T12443] ? __pfx___x64_sys_openat+0x10/0x10 [ 509.243169][T12443] do_syscall_64+0x115/0x840 [ 509.243200][T12443] ? clear_bhb_loop+0x40/0x90 [ 509.243243][T12443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.243280][T12443] RIP: 0033:0x7faf02d9de59 [ 509.243309][T12443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 509.243345][T12443] RSP: 002b:00007faf03c6b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 509.243379][T12443] RAX: ffffffffffffffda RBX: 00007faf03026090 RCX: 00007faf02d9de59 [ 509.243403][T12443] RDX: 0000000000000401 RSI: 0000200000001640 RDI: ffffffffffffff9c [ 509.243426][T12443] RBP: 00007faf02e33e6f R08: 0000000000000000 R09: 0000000000000000 [ 509.243448][T12443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 509.243469][T12443] R13: 00007faf03026128 R14: 00007faf03026090 R15: 00007ffd02b683d8 [ 509.243515][T12443] [ 510.043017][T12449] Process accounting paused [ 510.389045][T12466] FAULT_INJECTION: forcing a failure. [ 510.389045][T12466] name failslab, interval 1, probability 0, space 0, times 0 [ 510.455474][T12475] netlink: 'syz.0.1436': attribute type 1 has an invalid length. [ 510.466240][T12466] CPU: 0 UID: 0 PID: 12466 Comm: syz.2.1431 Not tainted syzkaller #0 PREEMPT(full) [ 510.466289][T12466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 510.466312][T12466] Call Trace: [ 510.466324][T12466] [ 510.466338][T12466] dump_stack_lvl+0x100/0x190 [ 510.466386][T12466] should_fail_ex.cold+0x5/0xa [ 510.466426][T12466] should_failslab+0xc2/0x120 [ 510.466470][T12466] kmem_cache_alloc_noprof+0x91/0x6a0 [ 510.466508][T12466] ? d_instantiate+0x8a/0xb0 [ 510.466551][T12466] ? d_instantiate+0x8a/0xb0 [ 510.466587][T12466] ? alloc_empty_file+0x5b/0x1c0 [ 510.466636][T12466] alloc_empty_file+0x5b/0x1c0 [ 510.466680][T12466] alloc_file_pseudo+0x183/0x290 [ 510.466724][T12466] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 510.466778][T12466] ioctx_alloc+0x5d6/0x21a0 [ 510.466826][T12466] ? find_held_lock+0x2b/0x80 [ 510.466867][T12466] ? __pfx_ioctx_alloc+0x10/0x10 [ 510.466913][T12466] __x64_sys_io_setup+0xc9/0x220 [ 510.466952][T12466] do_syscall_64+0x115/0x840 [ 510.466985][T12466] ? clear_bhb_loop+0x40/0x90 [ 510.467028][T12466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.467065][T12466] RIP: 0033:0x7fdf6759de59 [ 510.467095][T12466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.467130][T12466] RSP: 002b:00007fdf657f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 510.467165][T12466] RAX: ffffffffffffffda RBX: 00007fdf67826180 RCX: 00007fdf6759de59 [ 510.467188][T12466] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000007ffe [ 510.467216][T12466] RBP: 00007fdf67633e6f R08: 0000000000000000 R09: 0000000000000000 [ 510.467242][T12466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 510.467269][T12466] R13: 00007fdf67826218 R14: 00007fdf67826180 R15: 00007fff655af898 [ 510.467316][T12466] [ 510.654555][T12475] netlink: 33 bytes leftover after parsing attributes in process `syz.0.1436'. [ 511.105135][T12492] FAULT_INJECTION: forcing a failure. [ 511.105135][T12492] name failslab, interval 1, probability 0, space 0, times 0 [ 511.118113][T12492] CPU: 0 UID: 0 PID: 12492 Comm: syz.2.1439 Not tainted syzkaller #0 PREEMPT(full) [ 511.118163][T12492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 511.118185][T12492] Call Trace: [ 511.118197][T12492] [ 511.118210][T12492] dump_stack_lvl+0x100/0x190 [ 511.118257][T12492] should_fail_ex.cold+0x5/0xa [ 511.118299][T12492] should_failslab+0xc2/0x120 [ 511.118362][T12492] kmem_cache_alloc_noprof+0x91/0x6a0 [ 511.118403][T12492] ? kasan_save_stack+0x30/0x50 [ 511.118442][T12492] ? kasan_save_track+0x14/0x30 [ 511.118479][T12492] ? __kasan_kmalloc+0xaa/0xb0 [ 511.118518][T12492] ? radix_tree_node_alloc.constprop.0+0x66/0x340 [ 511.118580][T12492] radix_tree_node_alloc.constprop.0+0x66/0x340 [ 511.118638][T12492] idr_get_free+0x52e/0xa00 [ 511.118704][T12492] idr_alloc_u32+0x1ac/0x320 [ 511.118741][T12492] ? __pfx_idr_alloc_u32+0x10/0x10 [ 511.118787][T12492] idr_alloc+0xc0/0x130 [ 511.118819][T12492] ? __pfx_idr_alloc+0x10/0x10 [ 511.118850][T12492] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 511.118899][T12492] tipc_conn_alloc+0x337/0x590 [ 511.118953][T12492] tipc_topsrv_kern_subscr+0x11c/0x3c0 [ 511.119022][T12492] ? __pfx_tipc_topsrv_kern_subscr+0x10/0x10 [ 511.119081][T12492] ? net_generic+0xea/0x2a0 [ 511.119121][T12492] tipc_group_create+0x4ab/0x660 [ 511.119163][T12492] tipc_setsockopt+0x611/0xe30 [ 511.119210][T12492] ? __pfx_tipc_setsockopt+0x10/0x10 [ 511.119268][T12492] ? __pfx_tipc_setsockopt+0x10/0x10 [ 511.119314][T12492] do_sock_setsockopt+0xf3/0x1d0 [ 511.119368][T12492] __sys_setsockopt+0x119/0x190 [ 511.119414][T12492] __x64_sys_setsockopt+0xbd/0x160 [ 511.119452][T12492] ? do_syscall_64+0x90/0x840 [ 511.119482][T12492] ? lockdep_hardirqs_on+0x78/0x100 [ 511.119536][T12492] do_syscall_64+0x115/0x840 [ 511.119567][T12492] ? clear_bhb_loop+0x40/0x90 [ 511.119613][T12492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.119650][T12492] RIP: 0033:0x7fdf6759de59 [ 511.119679][T12492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 511.119714][T12492] RSP: 002b:00007fdf683b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 511.119748][T12492] RAX: ffffffffffffffda RBX: 00007fdf67825fa0 RCX: 00007fdf6759de59 [ 511.119771][T12492] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000004 [ 511.119793][T12492] RBP: 00007fdf67633e6f R08: 0000000000000014 R09: 0000000000000000 [ 511.119815][T12492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 511.119836][T12492] R13: 00007fdf67826038 R14: 00007fdf67825fa0 R15: 00007fff655af898 [ 511.119881][T12492] [ 512.523712][T12516] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1444'. [ 513.103732][T12526] netlink: 'syz.2.1446': attribute type 1 has an invalid length. [ 513.124284][T12526] netlink: 33 bytes leftover after parsing attributes in process `syz.2.1446'. [ 513.402900][T12531] FAULT_INJECTION: forcing a failure. [ 513.402900][T12531] name failslab, interval 1, probability 0, space 0, times 0 [ 513.423472][T12532] FAULT_INJECTION: forcing a failure. [ 513.423472][T12532] name fail_futex, interval 1, probability 0, space 0, times 0 [ 513.436953][T12532] CPU: 0 UID: 0 PID: 12532 Comm: syz.3.1449 Not tainted syzkaller #0 PREEMPT(full) [ 513.436999][T12532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 513.437020][T12532] Call Trace: [ 513.437031][T12532] [ 513.437046][T12532] dump_stack_lvl+0x100/0x190 [ 513.437090][T12532] should_fail_ex.cold+0x5/0xa [ 513.437130][T12532] get_futex_key+0x1d2/0x14f0 [ 513.437190][T12532] ? __pfx_get_futex_key+0x10/0x10 [ 513.437257][T12532] futex_wait_setup+0x91/0x540 [ 513.437320][T12532] __futex_wait+0x19f/0x300 [ 513.437366][T12532] ? __pfx___futex_wait+0x10/0x10 [ 513.437407][T12532] ? futex_hash+0x311/0x400 [ 513.437462][T12532] ? __pfx_futex_wake_mark+0x10/0x10 [ 513.437516][T12532] ? __pfx_futex_hash+0x10/0x10 [ 513.437583][T12532] futex_wait+0xe6/0x370 [ 513.437626][T12532] ? __pfx_futex_wait+0x10/0x10 [ 513.437675][T12532] ? tipc_setsockopt+0x232/0xe30 [ 513.437717][T12532] ? __local_bh_enable_ip+0x9e/0x120 [ 513.437752][T12532] ? tipc_setsockopt+0x412/0xe30 [ 513.437802][T12532] do_futex+0x265/0x440 [ 513.437838][T12532] ? __pfx_do_futex+0x10/0x10 [ 513.437872][T12532] ? rcu_is_watching+0x12/0xc0 [ 513.437908][T12532] ? do_sock_setsockopt+0x101/0x1d0 [ 513.437952][T12532] ? kfree+0x1e5/0x6c0 [ 513.438008][T12532] __x64_sys_futex+0x34f/0x4d0 [ 513.438050][T12532] ? __pfx___x64_sys_futex+0x10/0x10 [ 513.438086][T12532] ? __sys_setsockopt+0x139/0x190 [ 513.438137][T12532] do_syscall_64+0x115/0x840 [ 513.438167][T12532] ? clear_bhb_loop+0x40/0x90 [ 513.438209][T12532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.438246][T12532] RIP: 0033:0x7faf02d9de59 [ 513.438283][T12532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 513.438320][T12532] RSP: 002b:00007faf03c8c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 513.438354][T12532] RAX: ffffffffffffffda RBX: 00007faf03025fa8 RCX: 00007faf02d9de59 [ 513.438378][T12532] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007faf03025fa8 [ 513.438400][T12532] RBP: 00007faf03025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 513.438422][T12532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 513.438444][T12532] R13: 00007faf03026038 R14: 00007ffd02b682f0 R15: 00007ffd02b683d8 [ 513.438488][T12532] [ 513.461570][T12531] CPU: 1 UID: 0 PID: 12531 Comm: syz.2.1450 Not tainted syzkaller #0 PREEMPT(full) [ 513.461688][T12531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 513.461749][T12531] Call Trace: [ 513.461791][T12531] [ 513.461823][T12531] dump_stack_lvl+0x100/0x190 [ 513.461938][T12531] should_fail_ex.cold+0x5/0xa [ 513.462057][T12531] should_failslab+0xc2/0x120 [ 513.462181][T12531] __kmalloc_cache_noprof+0x91/0x6c0 [ 513.462334][T12531] ? tipc_group_create+0xbc/0x660 [ 513.462445][T12531] tipc_group_create+0xbc/0x660 [ 513.462549][T12531] tipc_setsockopt+0x611/0xe30 [ 513.462679][T12531] ? __pfx_tipc_setsockopt+0x10/0x10 [ 513.462878][T12531] ? __pfx_tipc_setsockopt+0x10/0x10 [ 513.463010][T12531] do_sock_setsockopt+0xf3/0x1d0 [ 513.463149][T12531] __sys_setsockopt+0x119/0x190 [ 513.463260][T12531] __x64_sys_setsockopt+0xbd/0x160 [ 513.463357][T12531] ? do_syscall_64+0x90/0x840 [ 513.463442][T12531] ? lockdep_hardirqs_on+0x78/0x100 [ 513.463581][T12531] do_syscall_64+0x115/0x840 [ 513.463664][T12531] ? clear_bhb_loop+0x40/0x90 [ 513.463782][T12531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.463880][T12531] RIP: 0033:0x7fdf6759de59 [ 513.463955][T12531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 513.464048][T12531] RSP: 002b:00007fdf683b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 513.464133][T12531] RAX: ffffffffffffffda RBX: 00007fdf67825fa0 RCX: 00007fdf6759de59 [ 513.464190][T12531] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000004 [ 513.464252][T12531] RBP: 00007fdf67633e6f R08: 0000000000000014 R09: 0000000000000000 [ 513.464310][T12531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 513.464362][T12531] R13: 00007fdf67826038 R14: 00007fdf67825fa0 R15: 00007fff655af898 [ 513.464499][T12531] [ 514.050805][T12541] FAULT_INJECTION: forcing a failure. [ 514.050805][T12541] name failslab, interval 1, probability 0, space 0, times 0 [ 514.063589][T12541] CPU: 0 UID: 0 PID: 12541 Comm: syz.2.1453 Not tainted syzkaller #0 PREEMPT(full) [ 514.063621][T12541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 514.063637][T12541] Call Trace: [ 514.063647][T12541] [ 514.063658][T12541] dump_stack_lvl+0x100/0x190 [ 514.063689][T12541] should_fail_ex.cold+0x5/0xa [ 514.063717][T12541] should_failslab+0xc2/0x120 [ 514.063749][T12541] __kmalloc_cache_noprof+0x91/0x6c0 [ 514.063795][T12541] ? mpi_alloc+0x46/0x230 [ 514.063830][T12541] mpi_alloc+0x46/0x230 [ 514.063856][T12541] ? __virt_addr_valid+0x22a/0x430 [ 514.063880][T12541] rsa_enc+0x88/0x3b0 [ 514.063906][T12541] ? __pfx_rsa_enc+0x10/0x10 [ 514.063930][T12541] ? __virt_addr_valid+0x239/0x430 [ 514.063954][T12541] ? sg_init_one+0xf5/0x1b0 [ 514.063983][T12541] rsassa_pkcs1_verify+0x4eb/0xc20 [ 514.064021][T12541] ? __pfx_rsassa_pkcs1_verify+0x10/0x10 [ 514.064066][T12541] ? rsa_max_size+0xd/0x70 [ 514.064088][T12541] ? rsassa_pkcs1_set_pub_key+0x17d/0x1f0 [ 514.064122][T12541] public_key_verify_signature+0x5ee/0x910 [ 514.064160][T12541] ? __pfx_public_key_verify_signature+0x10/0x10 [ 514.064213][T12541] ? __pfx_public_key_verify_signature_2+0x10/0x10 [ 514.064249][T12541] verify_signature+0xe2/0x130 [ 514.064287][T12541] pkcs7_validate_trust+0x220/0x7f0 [ 514.064332][T12541] verify_pkcs7_message_sig+0x12c/0x230 [ 514.064376][T12541] ? __pfx_verify_pkcs7_message_sig+0x10/0x10 [ 514.064418][T12541] ? pkcs7_parse_message+0x5b1/0x870 [ 514.064457][T12541] ? kfree+0x22b/0x6c0 [ 514.064497][T12541] ? pkcs7_parse_message+0x5b6/0x870 [ 514.064541][T12541] verify_pkcs7_signature+0x6d/0xa0 [ 514.064568][T12541] valid_regdb+0x211/0x590 [ 514.064603][T12541] ? __pfx_valid_regdb+0x10/0x10 [ 514.064631][T12541] ? __kasan_kmalloc+0xaa/0xb0 [ 514.064665][T12541] reg_reload_regdb+0x11a/0x460 [ 514.064701][T12541] ? __pfx_reg_reload_regdb+0x10/0x10 [ 514.064739][T12541] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 514.064762][T12541] ? nl80211_pre_doit+0x19a/0xae0 [ 514.064792][T12541] genl_family_rcv_msg_doit+0x214/0x300 [ 514.064822][T12541] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 514.064847][T12541] ? genl_get_cmd+0x3e7/0x760 [ 514.064894][T12541] ? bpf_lsm_capable+0x9/0x10 [ 514.064918][T12541] ? security_capable+0x80/0x260 [ 514.064962][T12541] genl_rcv_msg+0x560/0x800 [ 514.065026][T12541] ? __pfx_genl_rcv_msg+0x10/0x10 [ 514.065062][T12541] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 514.065102][T12541] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 514.065149][T12541] ? __pfx_nl80211_post_doit+0x10/0x10 [ 514.065199][T12541] netlink_rcv_skb+0x159/0x420 [ 514.065254][T12541] ? __pfx_genl_rcv_msg+0x10/0x10 [ 514.065298][T12541] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 514.065362][T12541] ? netlink_deliver_tap+0x1ae/0xcc0 [ 514.065413][T12541] genl_rcv+0x28/0x40 [ 514.065439][T12541] netlink_unicast+0x585/0x850 [ 514.065491][T12541] ? __pfx_netlink_unicast+0x10/0x10 [ 514.065549][T12541] netlink_sendmsg+0x8b0/0xda0 [ 514.065602][T12541] ? __pfx_netlink_sendmsg+0x10/0x10 [ 514.065654][T12541] ? apparmor_socket_sendmsg+0x15b/0x270 [ 514.065710][T12541] ____sys_sendmsg+0xa4d/0xbe0 [ 514.065764][T12541] ? __pfx_netlink_sendmsg+0x10/0x10 [ 514.065820][T12541] ? __pfx_____sys_sendmsg+0x10/0x10 [ 514.065891][T12541] ___sys_sendmsg+0x190/0x1e0 [ 514.065948][T12541] ? __pfx____sys_sendmsg+0x10/0x10 [ 514.065998][T12541] ? __lock_acquire+0x49f/0x1a40 [ 514.066100][T12541] __sys_sendmsg+0x160/0x210 [ 514.066142][T12541] ? __pfx___sys_sendmsg+0x10/0x10 [ 514.066206][T12541] do_syscall_64+0x115/0x840 [ 514.066245][T12541] ? clear_bhb_loop+0x40/0x90 [ 514.066294][T12541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.066327][T12541] RIP: 0033:0x7fdf6759de59 [ 514.066354][T12541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 514.066385][T12541] RSP: 002b:00007fdf683b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 514.066422][T12541] RAX: ffffffffffffffda RBX: 00007fdf67825fa0 RCX: 00007fdf6759de59 [ 514.066449][T12541] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000005 [ 514.066472][T12541] RBP: 00007fdf67633e6f R08: 0000000000000000 R09: 0000000000000000 [ 514.066493][T12541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 514.066515][T12541] R13: 00007fdf67826038 R14: 00007fdf67825fa0 R15: 00007fff655af898 [ 514.066560][T12541] [ 514.818498][T12556] syz.0.1458(12556): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 514.852691][T12553] netlink: 'syz.2.1456': attribute type 1 has an invalid length. [ 514.883743][T12553] netlink: 33 bytes leftover after parsing attributes in process `syz.2.1456'. [ 515.085098][T12566] FAULT_INJECTION: forcing a failure. [ 515.085098][T12566] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 515.121252][T12566] CPU: 0 UID: 0 PID: 12566 Comm: syz.3.1462 Not tainted syzkaller #0 PREEMPT(full) [ 515.121298][T12566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 515.121321][T12566] Call Trace: [ 515.121333][T12566] [ 515.121347][T12566] dump_stack_lvl+0x100/0x190 [ 515.121400][T12566] should_fail_ex.cold+0x5/0xa [ 515.121434][T12566] ? prepare_alloc_pages+0x16d/0x5f0 [ 515.121485][T12566] should_fail_alloc_page+0xeb/0x140 [ 515.121535][T12566] prepare_alloc_pages+0x1f0/0x5f0 [ 515.121583][T12566] ? __kernel_text_address+0xd/0x30 [ 515.121637][T12566] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 515.121689][T12566] ? stack_trace_save+0x8e/0xc0 [ 515.121745][T12566] ? __pfx_stack_trace_save+0x10/0x10 [ 515.121797][T12566] ? stack_depot_save_flags+0x27/0x9d0 [ 515.121862][T12566] ? hrtimer_start_range_ns_common+0x78e/0x18b0 [ 515.121912][T12566] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 515.121951][T12566] ? kasan_save_stack+0x3f/0x50 [ 515.121988][T12566] ? kasan_save_stack+0x30/0x50 [ 515.122024][T12566] ? kasan_save_track+0x14/0x30 [ 515.122062][T12566] ? __kasan_slab_alloc+0x89/0x90 [ 515.122101][T12566] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 515.122139][T12566] ? __pmd_alloc+0xbf/0x950 [ 515.122183][T12566] ? __handle_mm_fault+0xa9c/0x2a00 [ 515.122233][T12566] ? handle_mm_fault+0x37b/0xa30 [ 515.122284][T12566] ? do_user_addr_fault+0x74c/0x12f0 [ 515.122327][T12566] ? exc_page_fault+0x6f/0xd0 [ 515.122377][T12566] ? asm_exc_page_fault+0x26/0x30 [ 515.122410][T12566] ? __put_user_8+0xd/0x30 [ 515.122459][T12566] ? __x64_sys_get_robust_list+0xbf/0x150 [ 515.122494][T12566] ? do_syscall_64+0x115/0x840 [ 515.122522][T12566] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.122577][T12566] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 515.122628][T12566] ? policy_nodemask+0xed/0x4f0 [ 515.122677][T12566] alloc_pages_mpol+0x1fb/0x540 [ 515.122737][T12566] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 515.122794][T12566] ? __pfx_filemap_map_pages+0x10/0x10 [ 515.122845][T12566] alloc_pages_noprof+0x1a/0x160 [ 515.122897][T12566] pte_alloc_one+0x1c/0x3d0 [ 515.122948][T12566] __do_fault+0x26c/0x440 [ 515.122991][T12566] do_fault+0x2db/0x1750 [ 515.123035][T12566] ? __pmd_alloc+0x3fb/0x950 [ 515.123085][T12566] __handle_mm_fault+0x187d/0x2a00 [ 515.123147][T12566] ? mt_find+0x45e/0x8e0 [ 515.123186][T12566] ? __pfx___handle_mm_fault+0x10/0x10 [ 515.123238][T12566] ? __pfx_mt_find+0x10/0x10 [ 515.123300][T12566] ? find_vma+0xbf/0x140 [ 515.123341][T12566] ? __pfx_find_vma+0x10/0x10 [ 515.123386][T12566] handle_mm_fault+0x37b/0xa30 [ 515.123447][T12566] do_user_addr_fault+0x74c/0x12f0 [ 515.123504][T12566] exc_page_fault+0x6f/0xd0 [ 515.123557][T12566] asm_exc_page_fault+0x26/0x30 [ 515.123592][T12566] RIP: 0010:__put_user_8+0xd/0x30 [ 515.123647][T12566] Code: 89 01 31 c9 0f 01 ca e9 d1 d9 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <48> 89 01 31 c9 0f 01 ca c3 cc cc cc cc 66 0f 1f 44 00 00 90 90 90 [ 515.123681][T12566] RSP: 0018:ffffc90003f07ed8 EFLAGS: 00050246 [ 515.123718][T12566] RAX: 0000000000000018 RBX: 0000000000000000 RCX: 0000000000000000 [ 515.123739][T12566] RDX: 0000000000080000 RSI: ffffffff825b8731 RDI: ffffffff8c400380 [ 515.123763][T12566] RBP: 0000000000000000 R08: 0000000000000001 R09: 00000000000001c9 [ 515.123785][T12566] R10: 0000000000000200 R11: 0000000000000000 R12: 00007faf03c8c9a0 [ 515.123807][T12566] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000112 [ 515.123842][T12566] ? __might_fault+0x111/0x140 [ 515.123882][T12566] __x64_sys_get_robust_list+0xbf/0x150 [ 515.123923][T12566] do_syscall_64+0x115/0x840 [ 515.123953][T12566] ? clear_bhb_loop+0x40/0x90 [ 515.123996][T12566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.124032][T12566] RIP: 0033:0x7faf02d9de59 [ 515.124060][T12566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 515.124094][T12566] RSP: 002b:00007faf03c8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000112 [ 515.124126][T12566] RAX: ffffffffffffffda RBX: 00007faf03025fa0 RCX: 00007faf02d9de59 [ 515.124149][T12566] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 515.124171][T12566] RBP: 00007faf02e33e6f R08: 0000000000000000 R09: 0000000000000000 [ 515.124194][T12566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 515.124215][T12566] R13: 00007faf03026038 R14: 00007faf03025fa0 R15: 00007ffd02b683d8 [ 515.124261][T12566] [ 515.682220][T12567] FAULT_INJECTION: forcing a failure. [ 515.682220][T12567] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 515.714180][T12567] CPU: 0 UID: 0 PID: 12567 Comm: syz.2.1461 Not tainted syzkaller #0 PREEMPT(full) [ 515.714234][T12567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 515.714254][T12567] Call Trace: [ 515.714266][T12567] [ 515.714280][T12567] dump_stack_lvl+0x100/0x190 [ 515.714327][T12567] should_fail_ex.cold+0x5/0xa [ 515.714360][T12567] ? prepare_alloc_pages+0x16d/0x5f0 [ 515.714411][T12567] should_fail_alloc_page+0xeb/0x140 [ 515.714460][T12567] prepare_alloc_pages+0x1f0/0x5f0 [ 515.714525][T12567] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 515.714564][T12567] ? rcu_read_unlock+0x17/0x60 [ 515.714614][T12567] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 515.714669][T12567] ? __mod_zone_page_state+0xe2/0x190 [ 515.714735][T12567] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 515.714792][T12567] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 515.714841][T12567] ? find_held_lock+0x2b/0x80 [ 515.714896][T12567] ? __pfx_walk_pgd_range+0x10/0x10 [ 515.714936][T12567] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 515.714991][T12567] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 515.715042][T12567] ? policy_nodemask+0xed/0x4f0 [ 515.715091][T12567] alloc_pages_mpol+0x1fb/0x540 [ 515.715140][T12567] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 515.715198][T12567] folio_alloc_mpol_noprof+0x36/0x260 [ 515.715256][T12567] shmem_alloc_folio+0x135/0x160 [ 515.715304][T12567] shmem_alloc_and_add_folio+0x371/0xd40 [ 515.715364][T12567] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 515.715419][T12567] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 515.715479][T12567] shmem_get_folio_gfp+0x6ad/0x1910 [ 515.715538][T12567] ? filemap_map_pages+0x112d/0x1fe0 [ 515.715591][T12567] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 515.715647][T12567] ? __pfx_filemap_map_pages+0x10/0x10 [ 515.715701][T12567] ? filemap_map_pages+0x1137/0x1fe0 [ 515.715758][T12567] shmem_fault+0x1f9/0xa20 [ 515.715789][T12567] ? __lock_acquire+0x49f/0x1a40 [ 515.715841][T12567] ? __pfx_shmem_fault+0x10/0x10 [ 515.715904][T12567] ? __pfx_filemap_map_pages+0x10/0x10 [ 515.715961][T12567] ? find_held_lock+0x2b/0x80 [ 515.716004][T12567] __do_fault+0x10b/0x440 [ 515.716045][T12567] do_fault+0xa99/0x1750 [ 515.716098][T12567] __handle_mm_fault+0x187d/0x2a00 [ 515.716160][T12567] ? mt_find+0x45e/0x8e0 [ 515.716201][T12567] ? __pfx___handle_mm_fault+0x10/0x10 [ 515.716263][T12567] ? __pfx_mt_find+0x10/0x10 [ 515.716325][T12567] ? find_vma+0xbf/0x140 [ 515.716366][T12567] ? __pfx_find_vma+0x10/0x10 [ 515.716409][T12567] handle_mm_fault+0x37b/0xa30 [ 515.716471][T12567] do_user_addr_fault+0x74c/0x12f0 [ 515.716528][T12567] exc_page_fault+0x6f/0xd0 [ 515.716581][T12567] asm_exc_page_fault+0x26/0x30 [ 515.716617][T12567] RIP: 0010:__get_user_nocheck_1+0x6/0x30 [ 515.716666][T12567] Code: e9 ff 95 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb 0f ae e8 <0f> b6 10 31 c0 0f 01 ca e9 cd 95 04 00 66 66 2e 0f 1f 84 00 00 00 [ 515.716700][T12567] RSP: 0018:ffffc90003ccfeb0 EFLAGS: 00050202 [ 515.716729][T12567] RAX: 0000000000000007 RBX: ffffc90003ccff48 RCX: ffffc9000fa01000 [ 515.716753][T12567] RDX: 0000000000080000 RSI: ffffffff81759626 RDI: ffffc90003ccff48 [ 515.716776][T12567] RBP: ffff8880781dbe00 R08: 0000000000000005 R09: 0000000000000000 [ 515.716799][T12567] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880781dbe00 [ 515.716821][T12567] R13: 00000000000000ca R14: 0000000000000020 R15: 00000000000000ca [ 515.716855][T12567] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 515.716915][T12567] syscall_user_dispatch+0x76/0x130 [ 515.716954][T12567] ? do_syscall_64+0x90/0x840 [ 515.716984][T12567] ? lockdep_hardirqs_on+0x78/0x100 [ 515.717037][T12567] do_syscall_64+0x530/0x840 [ 515.717067][T12567] ? clear_bhb_loop+0x40/0x90 [ 515.717107][T12567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.717143][T12567] RIP: 0033:0x7fdf6759de59 [ 515.717171][T12567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 515.717205][T12567] RSP: 002b:00007fdf683950e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 515.717246][T12567] RAX: ffffffffffffffda RBX: 00007fdf67826098 RCX: 00007fdf6759de59 [ 515.717270][T12567] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fdf6782609c [ 515.717304][T12567] RBP: 00007fdf67826090 R08: 0000000000000001 R09: 0000000000000000 [ 515.717324][T12567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 515.717344][T12567] R13: 00007fdf67826128 R14: 00007fff655af7b0 R15: 00007fff655af898 [ 515.717408][T12567] [ 516.399417][T12579] FAULT_INJECTION: forcing a failure. [ 516.399417][T12579] name failslab, interval 1, probability 0, space 0, times 0 [ 516.418621][T12579] CPU: 1 UID: 0 PID: 12579 Comm: syz.3.1465 Not tainted syzkaller #0 PREEMPT(full) [ 516.418668][T12579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 516.418689][T12579] Call Trace: [ 516.418702][T12579] [ 516.418715][T12579] dump_stack_lvl+0x100/0x190 [ 516.418759][T12579] should_fail_ex.cold+0x5/0xa [ 516.418798][T12579] should_failslab+0xc2/0x120 [ 516.418844][T12579] __kmalloc_cache_noprof+0x91/0x6c0 [ 516.418902][T12579] ? mpi_alloc+0x46/0x230 [ 516.418951][T12579] mpi_alloc+0x46/0x230 [ 516.418990][T12579] rsa_check_payload+0x3b/0xc0 [ 516.419029][T12579] rsa_enc+0x198/0x3b0 [ 516.419072][T12579] ? __pfx_rsa_enc+0x10/0x10 [ 516.419108][T12579] ? __virt_addr_valid+0x239/0x430 [ 516.419143][T12579] ? sg_init_one+0xf5/0x1b0 [ 516.419185][T12579] rsassa_pkcs1_verify+0x4eb/0xc20 [ 516.419239][T12579] ? __pfx_rsassa_pkcs1_verify+0x10/0x10 [ 516.419308][T12579] ? rsa_max_size+0xd/0x70 [ 516.419340][T12579] ? rsassa_pkcs1_set_pub_key+0x17d/0x1f0 [ 516.419388][T12579] public_key_verify_signature+0x5ee/0x910 [ 516.419442][T12579] ? __pfx_public_key_verify_signature+0x10/0x10 [ 516.419509][T12579] ? asymmetric_key_generate_id+0x7e/0x180 [ 516.419561][T12579] x509_check_for_self_signed+0x325/0x510 [ 516.419620][T12579] x509_cert_parse+0x60c/0x910 [ 516.419663][T12579] ? ___sys_sendmsg+0x190/0x1e0 [ 516.419713][T12579] ? __sys_sendmsg+0x160/0x210 [ 516.419749][T12579] ? do_syscall_64+0x115/0x840 [ 516.419785][T12579] pkcs7_extract_cert+0xa4/0x380 [ 516.419844][T12579] asn1_ber_decoder+0x12b3/0x2170 [ 516.419914][T12579] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 516.419975][T12579] ? kasan_save_track+0x14/0x30 [ 516.420014][T12579] ? __kasan_kmalloc+0xaa/0xb0 [ 516.420053][T12579] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 516.420118][T12579] ? pkcs7_parse_message+0x15f/0x870 [ 516.420178][T12579] pkcs7_parse_message+0x289/0x870 [ 516.420236][T12579] verify_pkcs7_signature+0x30/0xa0 [ 516.420275][T12579] valid_regdb+0x211/0x590 [ 516.420322][T12579] ? __pfx_valid_regdb+0x10/0x10 [ 516.420369][T12579] ? __kasan_kmalloc+0xaa/0xb0 [ 516.420416][T12579] reg_reload_regdb+0x11a/0x460 [ 516.420464][T12579] ? __pfx_reg_reload_regdb+0x10/0x10 [ 516.420514][T12579] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 516.420550][T12579] ? nl80211_pre_doit+0x19a/0xae0 [ 516.420590][T12579] genl_family_rcv_msg_doit+0x214/0x300 [ 516.420633][T12579] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 516.420669][T12579] ? genl_get_cmd+0x3e7/0x760 [ 516.420735][T12579] ? bpf_lsm_capable+0x9/0x10 [ 516.420770][T12579] ? security_capable+0x80/0x260 [ 516.420833][T12579] genl_rcv_msg+0x560/0x800 [ 516.420874][T12579] ? __pfx_genl_rcv_msg+0x10/0x10 [ 516.420909][T12579] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 516.420943][T12579] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 516.420989][T12579] ? __pfx_nl80211_post_doit+0x10/0x10 [ 516.421040][T12579] netlink_rcv_skb+0x159/0x420 [ 516.421101][T12579] ? __pfx_genl_rcv_msg+0x10/0x10 [ 516.421140][T12579] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 516.421212][T12579] ? netlink_deliver_tap+0x1ae/0xcc0 [ 516.421271][T12579] genl_rcv+0x28/0x40 [ 516.421301][T12579] netlink_unicast+0x585/0x850 [ 516.421359][T12579] ? __pfx_netlink_unicast+0x10/0x10 [ 516.421425][T12579] netlink_sendmsg+0x8b0/0xda0 [ 516.421485][T12579] ? __pfx_netlink_sendmsg+0x10/0x10 [ 516.421544][T12579] ? apparmor_socket_sendmsg+0x15b/0x270 [ 516.421606][T12579] ____sys_sendmsg+0xa4d/0xbe0 [ 516.421655][T12579] ? __pfx_netlink_sendmsg+0x10/0x10 [ 516.421712][T12579] ? __pfx_____sys_sendmsg+0x10/0x10 [ 516.421798][T12579] ___sys_sendmsg+0x190/0x1e0 [ 516.421855][T12579] ? __pfx____sys_sendmsg+0x10/0x10 [ 516.421904][T12579] ? __lock_acquire+0x49f/0x1a40 [ 516.422006][T12579] __sys_sendmsg+0x160/0x210 [ 516.422053][T12579] ? __pfx___sys_sendmsg+0x10/0x10 [ 516.422125][T12579] do_syscall_64+0x115/0x840 [ 516.422157][T12579] ? clear_bhb_loop+0x40/0x90 [ 516.422200][T12579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.422237][T12579] RIP: 0033:0x7faf02d9de59 [ 516.422266][T12579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 516.422303][T12579] RSP: 002b:00007faf03c8c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 516.422338][T12579] RAX: ffffffffffffffda RBX: 00007faf03025fa0 RCX: 00007faf02d9de59 [ 516.422362][T12579] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000005 [ 516.422383][T12579] RBP: 00007faf02e33e6f R08: 0000000000000000 R09: 0000000000000000 [ 516.422405][T12579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 516.422426][T12579] R13: 00007faf03026038 R14: 00007faf03025fa0 R15: 00007ffd02b683d8 [ 516.422471][T12579] [ 518.587324][T12629] FAULT_INJECTION: forcing a failure. [ 518.587324][T12629] name fail_futex, interval 1, probability 0, space 0, times 0 [ 518.626848][T12629] CPU: 1 UID: 0 PID: 12629 Comm: syz.3.1475 Not tainted syzkaller #0 PREEMPT(full) [ 518.626896][T12629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 518.626917][T12629] Call Trace: [ 518.626929][T12629] [ 518.626941][T12629] dump_stack_lvl+0x100/0x190 [ 518.626989][T12629] should_fail_ex.cold+0x5/0xa [ 518.627028][T12629] get_futex_key+0x1d2/0x14f0 [ 518.627091][T12629] ? __pfx_get_futex_key+0x10/0x10 [ 518.627150][T12629] ? blk_finish_plug+0x83/0xa0 [ 518.627206][T12629] futex_wake+0xf4/0x5e0 [ 518.627246][T12629] ? __up_read+0x333/0x980 [ 518.627282][T12629] ? __pfx___up_read+0x10/0x10 [ 518.627315][T12629] ? __pfx_futex_wake+0x10/0x10 [ 518.627373][T12629] ? madvise_unlock+0xa9/0x220 [ 518.627429][T12629] do_futex+0x2b2/0x440 [ 518.627466][T12629] ? __pfx_do_futex+0x10/0x10 [ 518.627504][T12629] ? find_held_lock+0x2b/0x80 [ 518.627540][T12629] ? __fget_files+0x215/0x3d0 [ 518.627594][T12629] __x64_sys_futex+0x34f/0x4d0 [ 518.627635][T12629] ? __pfx___x64_sys_futex+0x10/0x10 [ 518.627685][T12629] do_syscall_64+0x115/0x840 [ 518.627717][T12629] ? clear_bhb_loop+0x40/0x90 [ 518.627760][T12629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.627798][T12629] RIP: 0033:0x7faf02d9de59 [ 518.627826][T12629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 518.627861][T12629] RSP: 002b:00007faf03c4a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 518.627895][T12629] RAX: ffffffffffffffda RBX: 00007faf03026188 RCX: 00007faf02d9de59 [ 518.627919][T12629] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007faf0302618c [ 518.627941][T12629] RBP: 00007faf03026180 R08: 0000000000000001 R09: 0000000000000000 [ 518.627962][T12629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 518.627984][T12629] R13: 00007faf03026218 R14: 00007ffd02b682f0 R15: 00007ffd02b683d8 [ 518.628028][T12629] [ 519.422883][T12637] FAULT_INJECTION: forcing a failure. [ 519.422883][T12637] name failslab, interval 1, probability 0, space 0, times 0 [ 519.505104][T12637] CPU: 1 UID: 0 PID: 12637 Comm: syz.1.1478 Not tainted syzkaller #0 PREEMPT(full) [ 519.505155][T12637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 519.505178][T12637] Call Trace: [ 519.505191][T12637] [ 519.505205][T12637] dump_stack_lvl+0x100/0x190 [ 519.505251][T12637] should_fail_ex.cold+0x5/0xa [ 519.505292][T12637] should_failslab+0xc2/0x120 [ 519.505338][T12637] __kmalloc_noprof+0xfc/0x820 [ 519.505380][T12637] ? __memcg_list_lru_alloc+0x418/0x680 [ 519.505446][T12637] __memcg_list_lru_alloc+0x418/0x680 [ 519.505503][T12637] ? xa_load+0x149/0x2c0 [ 519.505551][T12637] ? __pfx___memcg_list_lru_alloc+0x10/0x10 [ 519.505618][T12637] ? rcu_read_unlock+0x17/0x60 [ 519.505674][T12637] memcg_list_lru_alloc+0xd3/0x100 [ 519.505714][T12637] __memcg_slab_post_alloc_hook+0x28b/0x1160 [ 519.505780][T12637] ? kasan_save_track+0x14/0x30 [ 519.505824][T12637] kmem_cache_alloc_lru_noprof+0x583/0x6a0 [ 519.505865][T12637] ? lockdep_hardirqs_on+0x78/0x100 [ 519.505930][T12637] ? __d_alloc+0x35/0xa50 [ 519.505972][T12637] __d_alloc+0x35/0xa50 [ 519.506003][T12637] ? inode_set_ctime_current+0x283/0x850 [ 519.506046][T12637] d_alloc_pseudo+0x1c/0xc0 [ 519.506090][T12637] alloc_file_pseudo+0x118/0x290 [ 519.506134][T12637] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 519.506189][T12637] ioctx_alloc+0x5d6/0x21a0 [ 519.506237][T12637] ? find_held_lock+0x2b/0x80 [ 519.506278][T12637] ? __pfx_ioctx_alloc+0x10/0x10 [ 519.506324][T12637] __x64_sys_io_setup+0xc9/0x220 [ 519.506362][T12637] do_syscall_64+0x115/0x840 [ 519.506393][T12637] ? clear_bhb_loop+0x40/0x90 [ 519.506437][T12637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.506479][T12637] RIP: 0033:0x7f68cff9de59 [ 519.506510][T12637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 519.506546][T12637] RSP: 002b:00007f68d0ec5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 519.506581][T12637] RAX: ffffffffffffffda RBX: 00007f68d0226180 RCX: 00007f68cff9de59 [ 519.506605][T12637] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000007ffe [ 519.506627][T12637] RBP: 00007f68d0033e6f R08: 0000000000000000 R09: 0000000000000000 [ 519.506650][T12637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 519.506672][T12637] R13: 00007f68d0226218 R14: 00007f68d0226180 R15: 00007ffe4adb20f8 [ 519.506718][T12637] [ 519.755803][T12647] can: request_module (can-proto-0) failed. [ 519.778338][T12647] FAULT_INJECTION: forcing a failure. [ 519.778338][T12647] name failslab, interval 1, probability 0, space 0, times 0 [ 519.808191][T12647] CPU: 1 UID: 0 PID: 12647 Comm: syz.3.1483 Not tainted syzkaller #0 PREEMPT(full) [ 519.808240][T12647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 519.808262][T12647] Call Trace: [ 519.808275][T12647] [ 519.808288][T12647] dump_stack_lvl+0x100/0x190 [ 519.808335][T12647] should_fail_ex.cold+0x5/0xa [ 519.808375][T12647] should_failslab+0xc2/0x120 [ 519.808420][T12647] kmem_cache_alloc_noprof+0x91/0x6a0 [ 519.808458][T12647] ? alloc_uid+0xe2/0x4c0 [ 519.808499][T12647] ? alloc_uid+0x13d/0x4c0 [ 519.808545][T12647] alloc_uid+0x13d/0x4c0 [ 519.808586][T12647] ? __pfx_alloc_uid+0x10/0x10 [ 519.808628][T12647] ? bpf_lsm_capable+0x9/0x10 [ 519.808661][T12647] ? security_capable+0x80/0x260 [ 519.808721][T12647] __sys_setreuid+0x63c/0xb00 [ 519.808785][T12647] do_syscall_64+0x115/0x840 [ 519.808817][T12647] ? clear_bhb_loop+0x40/0x90 [ 519.808860][T12647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.808896][T12647] RIP: 0033:0x7faf02d9de59 [ 519.808934][T12647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 519.808965][T12647] RSP: 002b:00007faf03c8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000071 [ 519.808994][T12647] RAX: ffffffffffffffda RBX: 00007faf03025fa0 RCX: 00007faf02d9de59 [ 519.809016][T12647] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000003 [ 519.809036][T12647] RBP: 00007faf02e33e6f R08: 0000000000000000 R09: 0000000000000000 [ 519.809055][T12647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 519.809074][T12647] R13: 00007faf03026038 R14: 00007faf03025fa0 R15: 00007ffd02b683d8 [ 519.809113][T12647] [ 520.757136][T12672] netlink: 'syz.2.1490': attribute type 1 has an invalid length. [ 522.144474][T12712] syz.2.1500 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 522.222555][T12714] ================================================================== [ 522.222582][T12714] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x19fb/0x1d60 [ 522.222670][T12714] Write of size 8 at addr ffffc900049392e0 by task syz.2.1500/12714 [ 522.222699][T12714] [ 522.222714][T12714] CPU: 0 UID: 0 PID: 12714 Comm: syz.2.1500 Not tainted syzkaller #0 PREEMPT(full) [ 522.222750][T12714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 522.222771][T12714] Call Trace: [ 522.222781][T12714] [ 522.222794][T12714] dump_stack_lvl+0x100/0x190 [ 522.222830][T12714] print_report+0x13d/0x4b0 [ 522.222877][T12714] ? _raw_spin_lock_irqsave+0x52/0x60 [ 522.222928][T12714] ? sys_imageblit+0x19fb/0x1d60 [ 522.222965][T12714] kasan_report+0xdf/0x1c0 [ 522.223009][T12714] ? sys_imageblit+0x19fb/0x1d60 [ 522.223065][T12714] sys_imageblit+0x19fb/0x1d60 [ 522.223107][T12714] ? __pfx_sys_imageblit+0x10/0x10 [ 522.223147][T12714] ? prb_read_valid+0x78/0xa0 [ 522.223212][T12714] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 522.223320][T12714] soft_cursor+0x524/0xa10 [ 522.223355][T12714] ? atomic_notifier_call_chain+0x60/0x1c0 [ 522.223399][T12714] ? fb_get_color_depth+0x120/0x250 [ 522.223495][T12714] bit_cursor+0xca1/0x1490 [ 522.223554][T12714] ? __pfx_bit_cursor+0x10/0x10 [ 522.223615][T12714] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 522.223664][T12714] ? get_color+0x1da/0x450 [ 522.223709][T12714] ? __pfx_bit_cursor+0x10/0x10 [ 522.223761][T12714] fbcon_cursor+0x43c/0x5e0 [ 522.223808][T12714] ? add_softcursor+0x1c0/0x290 [ 522.223888][T12714] set_cursor+0x1db/0x250 [ 522.223922][T12714] con_write+0x89/0xb0 [ 522.223961][T12714] n_tty_write+0x431/0x1160 [ 522.224083][T12714] ? __pfx_n_tty_write+0x10/0x10 [ 522.224134][T12714] ? __pfx_woken_wake_function+0x10/0x10 [ 522.224170][T12714] ? __pfx___might_resched+0x10/0x10 [ 522.224217][T12714] ? kfree+0x1e5/0x6c0 [ 522.224267][T12714] ? __pfx_n_tty_write+0x10/0x10 [ 522.224317][T12714] file_tty_write.isra.0+0x4d2/0x890 [ 522.224364][T12714] redirected_tty_write+0xd4/0x120 [ 522.224405][T12714] vfs_write+0x6ac/0x1050 [ 522.224456][T12714] ? __pfx_redirected_tty_write+0x10/0x10 [ 522.224499][T12714] ? __pfx_vfs_write+0x10/0x10 [ 522.224553][T12714] ? find_held_lock+0x2b/0x80 [ 522.224605][T12714] ksys_write+0x12a/0x250 [ 522.224655][T12714] ? __pfx_ksys_write+0x10/0x10 [ 522.224711][T12714] do_syscall_64+0x115/0x840 [ 522.224742][T12714] ? clear_bhb_loop+0x40/0x90 [ 522.224781][T12714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.224814][T12714] RIP: 0033:0x7fdf6759de59 [ 522.224841][T12714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 522.224875][T12714] RSP: 002b:00007fdf657f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 522.224905][T12714] RAX: ffffffffffffffda RBX: 00007fdf67826180 RCX: 00007fdf6759de59 [ 522.224927][T12714] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000005 [ 522.224949][T12714] RBP: 00007fdf67633e6f R08: 0000000000000000 R09: 0000000000000000 [ 522.224970][T12714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 522.224991][T12714] R13: 00007fdf67826218 R14: 00007fdf67826180 R15: 00007fff655af898 [ 522.225025][T12714] [ 522.225037][T12714] [ 522.225047][T12714] The buggy address belongs to a vmalloc virtual mapping [ 522.225077][T12714] Memory state around the buggy address: [ 522.225096][T12714] ffffc90004939180: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 522.225128][T12714] ffffc90004939200: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 522.225153][T12714] >ffffc90004939280: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 522.225172][T12714] ^ [ 522.225192][T12714] ffffc90004939300: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 522.225216][T12714] ffffc90004939380: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 522.225235][T12714] ================================================================== [ 522.243328][T12714] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 522.243356][T12714] CPU: 0 UID: 0 PID: 12714 Comm: syz.2.1500 Not tainted syzkaller #0 PREEMPT(full) [ 522.243399][T12714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 522.243420][T12714] Call Trace: [ 522.243432][T12714] [ 522.243446][T12714] dump_stack_lvl+0x100/0x190 [ 522.243486][T12714] vpanic+0x552/0x970 [ 522.243518][T12714] ? __pfx_vpanic+0x10/0x10 [ 522.243550][T12714] ? mark_held_locks+0x40/0x70 [ 522.243600][T12714] ? sys_imageblit+0x19fb/0x1d60 [ 522.243636][T12714] panic+0xd1/0xe0 [ 522.243665][T12714] ? __pfx_panic+0x10/0x10 [ 522.243708][T12714] ? sys_imageblit+0x19fb/0x1d60 [ 522.243745][T12714] ? preempt_schedule_common+0x42/0xc0 [ 522.243803][T12714] ? check_panic_on_warn+0x1f/0x90 [ 522.243851][T12714] check_panic_on_warn.cold+0x19/0x34 [ 522.243886][T12714] end_report.part.0+0x3a/0x90 [ 522.243933][T12714] kasan_report.cold+0xe/0x18 [ 522.243980][T12714] ? sys_imageblit+0x19fb/0x1d60 [ 522.244022][T12714] sys_imageblit+0x19fb/0x1d60 [ 522.244072][T12714] ? __pfx_sys_imageblit+0x10/0x10 [ 522.244113][T12714] ? prb_read_valid+0x78/0xa0 [ 522.244166][T12714] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 522.244221][T12714] soft_cursor+0x524/0xa10 [ 522.244256][T12714] ? atomic_notifier_call_chain+0x60/0x1c0 [ 522.244303][T12714] ? fb_get_color_depth+0x120/0x250 [ 522.244354][T12714] bit_cursor+0xca1/0x1490 [ 522.244412][T12714] ? __pfx_bit_cursor+0x10/0x10 [ 522.244471][T12714] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 522.244516][T12714] ? get_color+0x1da/0x450 [ 522.244560][T12714] ? __pfx_bit_cursor+0x10/0x10 [ 522.244610][T12714] fbcon_cursor+0x43c/0x5e0 [ 522.244656][T12714] ? add_softcursor+0x1c0/0x290 [ 522.244692][T12714] set_cursor+0x1db/0x250 [ 522.244724][T12714] con_write+0x89/0xb0 [ 522.244763][T12714] n_tty_write+0x431/0x1160 [ 522.244819][T12714] ? __pfx_n_tty_write+0x10/0x10 [ 522.244867][T12714] ? __pfx_woken_wake_function+0x10/0x10 [ 522.244903][T12714] ? __pfx___might_resched+0x10/0x10 [ 522.244949][T12714] ? kfree+0x1e5/0x6c0 [ 522.244998][T12714] ? __pfx_n_tty_write+0x10/0x10 [ 522.245047][T12714] file_tty_write.isra.0+0x4d2/0x890 [ 522.245100][T12714] redirected_tty_write+0xd4/0x120 [ 522.245140][T12714] vfs_write+0x6ac/0x1050 [ 522.245189][T12714] ? __pfx_redirected_tty_write+0x10/0x10 [ 522.245231][T12714] ? __pfx_vfs_write+0x10/0x10 [ 522.245278][T12714] ? find_held_lock+0x2b/0x80 [ 522.245329][T12714] ksys_write+0x12a/0x250 [ 522.245376][T12714] ? __pfx_ksys_write+0x10/0x10 [ 522.245429][T12714] do_syscall_64+0x115/0x840 [ 522.245459][T12714] ? clear_bhb_loop+0x40/0x90 [ 522.245497][T12714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.245532][T12714] RIP: 0033:0x7fdf6759de59 [ 522.245560][T12714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 522.245594][T12714] RSP: 002b:00007fdf657f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 522.245628][T12714] RAX: ffffffffffffffda RBX: 00007fdf67826180 RCX: 00007fdf6759de59 [ 522.245651][T12714] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000005 [ 522.245674][T12714] RBP: 00007fdf67633e6f R08: 0000000000000000 R09: 0000000000000000 [ 522.245696][T12714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 522.245718][T12714] R13: 00007fdf67826218 R14: 00007fdf67826180 R15: 00007fff655af898 [ 522.245752][T12714] [ 522.246370][T12714] Kernel Offset: disabled